Authenticating Distributed Data Using Web Services and XML Signatures

Proceedings of the ACM Workshop on XML Security

Volumn , Issue , 2003, Pages 80-89

  Polivy, Daniel J ^a   Tamassia, Roberto ^b  

^a MICROSOFT   (United States)

^b Brown Univerity   (United States)

Author keywords

Authentication; Digital Signatures; Web Services; XML

Indexed keywords

DATA STRUCTURES; DISTRIBUTED COMPUTER SYSTEMS; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; INFORMATION MANAGEMENT; NETWORK PROTOCOLS; SECURITY OF DATA; WORLD WIDE WEB;

AUTHENTICATION;

XML;

EID: 0141894805     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (25)

1. A. Anagnostopoulos, M. T. Goodrich, and R. Tamassia. Persistent authenticated dictionaries and their applications. Proc. Information Security Conference (ISC 2001), LNCS, vol. 2200, Springer-Verlag, 379-393, 2001.
2. M. Bartel, J. Boyer, B. Fox, B. LaMacchia and E. Simon. XML Signature Syntax and Processing. http://wvw.w3.org/TR/xmldsig-core/. W3C Recommendation, February 2002.
3. T. Bray, J. Paoli, C. M. Sperberg-McQueen and E. Maler. Extensible Markup Language (XML) 1.0 (Second Edition). http://wvw.w3c.org/TR/2000/REC-xml-20001006/. W3C Recommendation, October 2000.
4. J. Clark (editor). XSL Transformations (XSLT) Version 1.0. http://www.w3.org/TR/1999/REC-xslt-19991116. W3C Recommendation, November 1999.
5. D. Box, D. Ehnebuske, G. Kakivaya, A. Layman, N. Mendelsohn, H. Frystyk Nielsen, S. Thatte, and D. Winer. Simple Object Access Protocol (SOAP) 1.1. http://www.w3.org/TR/2000/NOTE-SOAP-20000508/. W3C Note, May 2000.
6. J. Boyer. Canonical XML Version 1.0. http://www.w3.org/TR/2001/REC-xml-c14n-20010315. W3C Recommendation, March 2001.
7. E. Christensen, F. Curbera, G. Meredith and S. Weerawarana. Web Services Description Language (WSDL) 1.1. http://www.w3.org/TR/2001/NOTE-wsdl-20010315. W3C Note, March 2001.
8. J. Clark and S. DeRose (eds.). XML Path Language (XPATH) Version 1.0. http://www.w3.org/TR/1999/REC-xpath-19991116. W3C Recommendation, November 1999.
9. D. Emory. End-to-end integrity of Web content with STMS. Manuscript. Brown University, 2002.
10. W. Ford, P. Hallam-Baker, B. Fox, B. Dillaway, B. LaMacchia, J. Epstein and J. Lapp. XML Key Management Specification (XKMS). http://www.w3.org/TR/2001/NOTE-xkms-20010330/. W3C Note, March 2001.
11. J. Gettys, J. Mogul, H. Frystyk, L. Masinter, P. Leach and T. Berners-Lee. Hypertext Transfer Protocol (HTTP/1.1). http://www.w3.org/Protocols/rfc2616/rfc2616.html. RFC2616.
12. M. T. Goodrich and R. Tamassia. Efficient authenticated dictionaries with skip lists and commutative hashing. Technical Report, Johns Hopkins Information Security Institute, 2000. http://www.cs.brown.edu/cgc/stms/papers/hashskip.pdf.
13. M. T. Goodrich, R. Tamassia, and A. Schwerin. Implementation of an authenticated dictionary with skip lists and commutative hashing. Proc. DARPA Information Survivability Conference and Exposition, vol. 2. 68-82, 2001.
14. M. T. Goodrich, and R. Tamassia and J. Hasic. An Efficient Dynamic and Distributed Cryptographic Accumulator. Proc. Information Security Conference (ISC 2002), LNCS, vol. 2433, Springer-Verlag, 372-388, 2002.
15. P. C. Kocher. On certificate revocation and validation. Proc. International Conference on Financial Cryptography, LNCS, vol. 1465, Springer-Verlag, 1998.
16. R. C. Merkle. Protocols for public key cryptosystems, Proc. IEEE Symp. on Security and Privacy, 1980.
17. R. C. Merkle. A certified digital signature. Advances in Cryptology-CRYPTO '89, LNCS, vol. 435, Springer-Verlag, 218-238, 1990.
18. M. Naor and K. Nissim. Certificate revocation and certificate update. Pro. 7th USENK Security Symposium (SECURITY-98), 217-228, Berkeley, 1998.
19. Premkumar T. Devanbu, Michael Gertz, April Kwong, Chip Martel, G. Nuckolls, Stuart G. Stubblebine. Flexible authentication of XML documents. ACM Conf. on Computer and Communications Security, 136-145, 2001.
20. W. Pugh. Skip lists: a probabilistic alternative to balanced trees. Communications of the ACM, 33(6):668-676, 1990.
21. R. L.Rivest, A. Shamir, and L. Adleman. A method for obtaining digital signatures and public-key cryptosystems. Communications of the ACM, 21(2):120-126, 1978.
22. Apache Software Foundation. http://www.apache.org/.
23. STMS System Architecture. Presentation. http://www.algomagic.com/presentations/software-architecture.ppt.
24. ITU-T Recommendation X.509 (1997 E): Information Technology - Open Systems Interconnection - The Directory: Authentication Framework, June 1997.
25. Microsoft .NET. http://www.microsoft.com/net/.