Secure emails in XML format using web services

Proceedings of the 5th IEEE European Conference on Web Services, ECOWS 07

Volumn , Issue , 2007, Pages 129-136

  Liao, Lijun ^a   Schwenk, Jörg ^a  

^a RUHR UNIVERSITY BOCHUM   (Germany)

Author keywords

[No Author keywords available]

Indexed keywords

COLD HEADING; INFORMATION MANAGEMENT; INFORMATION SERVICES; LEAD; MARKUP LANGUAGES; MECHANISMS; RELIABILITY; STANDARDS; WEB SERVICES; WORLD WIDE WEB; XML;

E MAIL COMMUNICATIONS; EMAIL CONTENT; EMAIL SECURITY; END TO END (ETE); EUROPEAN; IMPERSONATION ATTACKS; NEW APPROACHES; NON-REPUDIATION; PHISHING; SECURITY MECHANISMS; SIGNATURE GENERATION; XML FORMATS; XML TECHNOLOGY;

ELECTRONIC MAIL;

EID: 47749136635     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ECOWS.2007.12     Document Type: Conference Paper

References (24)

1. J. Callas, L. Donnerhacke, H. Finney, and R. Thayer, OpenPGP Message Format, IETF RFC 2440, Nov. 1998.
2. M. Elkins, D. D. Torto, R. Levien, and T. Roessler, MIME Security with OpenPGP, IETF RFC 3156, Aug. 2001.
3. B. Ramsdell (Editor), S/MIME Version 3 Message Specification, IETF RFC 2633, June 1999.
4. B. Ramsdell (Editor), Secure/Multipurpose Internet Mail Extensions (S/MIME) Version 3.1, IETF RFC 3851, July 2004.
5. P. Resnick, Internet Message Format, IETF RFC 2822, Apr. 2001.
6. R. Housley, Cryptographic Message Syntax, IETF RFC 3852, July 2004.
7. F. Hirsch, XML Security for Multipart MIME: Multipart/Signed and Multipart/Encrypted, IETF Internet-Draft, Oct. 2001. [Online]. Available: http://xml.coverpages.org/draft-fhirsch-xml-mime-security-00.html
8. M. Bartel, J. Boyer, B. Fox, B. LaMacchia, and E. Simon, XML-Signature Syntax and Processing, W3C Recommendation, Feb. 2002. [Online]. Available: http://www.w3.org/TR/2002/REC-xmldsig-core-20020212/
9. T. Imamura, B. Dillaway, and E. Simon, XML Encryption Syntax and Processing, W3C Recommendation, Dec. 2002. [Online]. Available: http://www.w3.org/TR/2002/REC-xmlenc-core-20021210/
10. J. Fenton and M. Thomas, Identified Internet Mail (Draft), IETF Internet-Draft, May 2005. [Online]. Available: http://www.identifiedmail.com/ draft-fenton-identified-mail.txt
11. J. Lyon and M. Wong, Sender ID: Authenticating E-Mail, IETF RFC 4406, Apr. 2006.
12. M. Wong and W. Schlitt, Sender Policy Framework (SPF) for Authorizing Use of Domains in E-Mail, Version 1, IETF RFC 4408, Apr. 2006.
13. E. Allman, J. Callas, M. Delany, M. Libbey, J. Fenton, and M. Thomas, DomainKeys Identified Mail (DKIM) Signatures, IETF Internet-Draft, Feb. 2007. [Online]. Available: https://datatracker.ietf.org/public/idindex.cgi? command=id_detail&id=14210
14. B. Adida, D. Chau, S. Hohenberger, and R. L. Rivest, "Lightweight email signatures," Feb. 2006. [Online]. Available: http://theory.lcs.mit. edu/~rivest/AdidaChauHohenbergerRivest-LightweightEmailSignatures.pdf
15. S. McGrath. (2003) xMail: E-mail as XML. [Online]. Available: http://www.phptr.com/articles/article.asp?p=32074&rl=1
16. L. Ewers, W. Kubbilun, L. Liao, and J. Schwenk, "Secure xmail or how to get rid of legacy code in secure email applications." in CMS '05 (LNCS 3677). Springer, 2005, pp. 291-300.
17. S. Taylor and P. A. Watters, "Trustworthy e-mail using secure XML web services," in CEC '05. Washington, DC, USA: IEEE Computer Society, 2005, pp. 307-312.
18. L. Liao and J. Schwenk, "Securing email communication with xml technology," in ICOMP'07 (The 2007 International Conference on Internet Computing), Las Vegas, Nevada, USA, 2007.
19. Berglund, S. Boag, D. Chamberlin, M. F. Fernandez, M. Kay, J. Robie, and J. Simon, XML Path Language (XPath), Version 2.0, W3C Recommendation, Jan. 2007. [Online]. Available: http://www.w3.org/TR/2007/REC-xpath20-20070123/
20. M. McIntosh and P. Austel, "XML signature element wrapping attacks and countermeasures," in SWS '05. New York, NY, USA: ACM Press, 2005, pp. 20-27.
21. J. J. Barton, S. Thatte, and H. F. Nielsen, SOAP Messages with Attachments, W3C Note, Dec. 2000. [Online]. Available: http://www.w3.org/TR/ 2000/NOTE-SOAP-attachments-20001211
22. XML Advanced Electronic Signatures (XAdES), Version 1.3.2, ETSI Technical Specification, Mar. 2006. [Online]. Available: http://webapp.etsi.org/ action/PU/20060307/ts_101903v010302p.pdf
23. K. Bhargavan, C. Fournet, and A. D. Gordon, "A semantics for web services authentication," Theor. Comput. Sci., vol. 340, no. 1, pp. 102-153, 2005.
24. S. Liu, J. Mei, A. Yue, and Z. Lin, "XSDL: Making XML semantics explicit," in SWDB'04 (LNCS 3372). Springer, 2004, pp. 64-83.