An Approach to XML Key Management Specification in X-Certificator
Joan Lu, Nathan Cripps, Hua Chen, Yan Xia Cao · Huddersfield Research Portal (University of Huddersfield) · 2005
An overview of an XML Key Management Specification (XKMS) service is presented within this paper. In particular the services offered by an XKMS service and it's relationship to XML signature and encryption are addressed. The latter two technologies represent Public Key Infrastructure (PKI) ideals responsible for the security of information at any level of a document. XKMS delivers practicality to the XML security family by delivering an implemental framework of trust which is not present in the others. Inheriting the benefits of a client-server system, the main principle is to delegate complex PKI operations away from the client. Additionally an XML content management prototype is showcased, namely X-Certificator. Developed with object-oriented technologies as provided by NET, the prototype endeavours to link XML security with documents stored in a relational database. It concludes with the importance of trust with regard to XML security and the approach to take for implementing an XKMS service for use with X-Certificator.