KS X 6033-2010 XML Signature Syntax and Processing(1 1 edition)《可扩展标记语言 电子签名语法和处理》.pdf

1、 KSKSKSKSKSKSKSK KSKSKS KSKSK KSKS KSK KS KS X 6033 KS X 6033:2010 2010 12 28 http:/www.kats.go.krKS X 6033:2010 : e- ( ) ( ) () () ( ) : () () ( ) () DRM () KS X 6033:2010 : (http:/www.standard.go.kr) ： ：2005 7 1 ：2010 12 28 2010-0643 ： e- ：e- () ( 02-509-7262) (http:/www.kats.go.kr). 10 5 , . KS X

2、 6033:2010 i ii 1 1 2 .1 3 4 3.1 4 3.2 4 3.3 , 4 4 5 4.1 6 4.2 8 4.3 9 5 .10 5.1 .10 5.2 .11 6 12 6.1 ds:CryptoBinary Simple .13 6.2 Signature .13 6.3 SignatureValue 13 6.4 Signedlnfo 14 6.5 KeyInfo .22 6.6 34 7 Signature 35 7.1 Manifest .35 7.2 SignatureProperties .36 7.3 Signature 36 7.4 Signature

3、 .37 8 37 8.1 37 8.2 .38 8.3 MAC39 8.4 40 8.5 .42 8.6 43 9 XML .47 9.1 XML 1.0 48 9.2 DOM/SAX 48 9.3 .49 10 .50 10.1 .50 10.2 51 10.3 , , .52 11 , DTD, .52 53 KS X 6033:2010 .56 KS X 6033:2010 ii World Wide Web Consortium(W3C) 2010 XML Signature Syntax and Processing Version 1.1 . , , , . , , . KS X

4、 6033:2010 XML Signature Syntax and Processing(1.1 edition) 1 XML . ( XML ) XML ( ) . XML 1 . (Eenveloped signature) (Enveloping Signature) XML (Detached Signature) . XML XML . . , , , . XML ( ) , . XML , , XML( ) . , , . (8.) . 2 . 2.1 (Authentication Code) . checksum . “ checksum data object check

5、sum .” 2.2 (Authentication, Message) / checksum , checksum . “ .” , ABA KS X 6033:2010 2 2.3 (Authentication, Signer) . “ , , .” , ABA ( .) . 2.4 Checksum “ (a) Object (b) Object ”SEC 2.5 (Core) . , , . 2.6 ( / ) Data Object(Content/Document) ( , , ) / HTTP HTTP . Object XML . . XML XML . XML XML XM

6、L . 2.7 (Integrity) “ , ” SEC. checksum . checksum . 2.8 (Object) XML . Object ( ) . 2.9 (Resource) “ID( ) . , , ( ), . . ( ) .” URI XML , , . KS X 6033:2010 3 2.10 (Signature) , / ( . ). , , . 2.11 (Signature, Application) . (SignatureValue ) . 2.12 (Signature, Detached) URI . . , XML . 2.13 (Signa

7、ture, Enveloping) Object . Object( ) (URI ). 2.14 (Signature, Enveloped) XML . XML . SignatureValue . 2.15 (Transform) . XML , XPath, XSLT . 2.16 (Validation, Core) SignedInfo 2.17 (Validation, Reference) DigestValue . 2.18 (Validation, Signature) SignatureValue (5.2) Canonicalization Method Signatu

8、reMethod SignedInfo . KS X 6033:2010 4 2.19 / (Validation, Trust/Application) . ( ). 3 3.1 , “ ” . , . (10.3 ). XML (XML-schema) DTD . . “MUST”, “MUST NOT”, “REQUIRED”, “SHALL”, “SHALL NOT”, “SHOULD”, “SHOULD NOT”, “RECOMMENDED”, “MAY”, “OPTIONAL” RFC2119KEYWORDS . “ ( ) .” , . XML ( ) . . XML “opti

9、onal” . XML XML-ns “REQUIRED” . 3.2 XML XML Signature RD . 3.3 , . , . ( ) XML XML-ns URI . xmlns = “http:/www.w3.org/2000/09/xmldsig#“ . XML XML , XML “dsig” XML / . , , URI(Uniform Resource Identifiers; ) . URI URI KS X 6033:2010 5 . URN(Uniform Resource Names) URN URL(Uniform Resource Locators) U

10、RL . URI , . . SignatureProperties . http:/www.w3.org/2000/09/xmldsig#SignatureProperties XSLT URI . http:/www.w3.org/TR/1999/REC-xslt-19991116 SHA1 . http:/www.w3.org/2000/09/xmldsig#sha1 FIPS PUB 180 2. . NIST URI XML XML . . . 4 XML . (5.) . (6.) Signature (7.) . XML . , , . XML ( ) . ( ) , . XML

11、 Signature ( “?” 0 1 “ ” 1 “*” 0 ). ( ()? KS X 6033:2010 6 )+ ()? ()* URI . XML . . XML . ( .) ( .) . Signature ( ID / ) XML ( ID) ID XML . 4.1 HTML4 XML . s01 s02 s03 s04 s05 s06 s07 s08 s09 s10 j6lwx3rvEPO0vKtMup4NbeVu8nk =/DigestValue s11 s12 s13 MC0CFFrVLtRlk = . s14 s15a s15b s15c s15d s15e s16

12、 s17 s02 12 SignedInfo . SignedInfo 2 SignedInfo SignedInfo Reference . SignatureValue SignedInfo SignatureValue . s03 CanonicalizationMethod SignedInfo . , . KS X 6033:2010 7 s04 SignatureMethod SignedInfo SignatureValue . , RSA SHA1 . . , . , . s05 11 Reference . . . . s14 16 KeyInfo . , , . KeyIn

13、fo . , . , . KeyInfo SignedInfo Reference KeyInfo . 4.1.1 s05 s06 s07 s08 s09 s10 j6lwx3rvEPO0vKtMup4NbeVu8nk /DigestValue s11 s05 Reference URI . Signature Reference 1 ( ). s05 08 ( ) . . URI , . s06 08 Transforms , . Transforms , / ( ), XSLT, XPath, XML Schema , XInclude . XPath XML . . , . Transf

14、orms , . ( ) , KS X 6033:2010 8 . s09 10 DigestMethod Transforms ( ) DigestValue . DigestValue . 4.2 . XML ( , / ). XML, RDF . Signature foo:assuredby . assuredby . SignatureProperties ( ： , , ). SignedInfo SignatureProperties Reference . ( SignatureProperty .), ( ). SignatureProperty . Target Signa

15、tureProperty Signature . SignatureProperty Object ( p02 p03). p01 . p02 . p03 p05 p06 p07 p08 p09 k3453rvEPO0vKtMup4NbeVu8nk/DigestValue p10 p11 p12 . p13 p14 p15 p16 p17 19990914 p18 14:34:34:34 p19 p20 p21 p22 KS X 6033:2010 9 p23 p04 Reference Type URI . Type Reference Object, SignatureProperty Manifest . Reference . Object XML . XML ( ), Object Reference Type Object . Type . p13 Object . Object / . p14 21 Reference ( “ ” XML “ ” ). 4.3 Manifest . 2