基于级联Hash函数的XML数据完整性
XML Data Integrity Based on Concatenated Hash Function
摘要：
数据完整性是数据认证的基础。XML数据认证的一个主要问题是，签名的XML数据可以复制到另一个文档，但仍然保持签名有效。这是由XML数据完整性保护引起的。通过研究发现，在细粒度安全环境下，XML数据完整性除了要保护数据内容完整性外，还要保护元素位置信息和上下文引用完整性。本文的目的是提出一个模型的XML数据完整性考虑XML数据的特点。提出了一种基于级联散列函数的XML数据完整性模型CSR（内容完整性、结构完整性、上下文引用完整性）。XML数据内容完整性是使用迭代散列过程来确保的，结构完整性是通过从根结点散列绝对路径字符串来保护的，上下文引用完整性是通过保护上下文相关元素来确保的。提出的XML数据完整性模型能够满足细粒度安全环境下的完整性要求，并与XML签名兼容。通过评估，提出的完整性模型具有更高的效率上的摘要值生成比Merkle哈希树的XML数据的完整性模型。
英文摘要：
Data integrity is the fundamental for data authentication. A major problem for XML data authentication is that signed XML data can be copied to another document but still keep signature valid. This is caused by XML data integrity protecting. Through investigation, the paper discovered that besides data content integrity, XML data integrity should also protect element location information, and context referential integrity under fine-grained security situation. The aim of this paper is to propose a model for XML data integrity considering XML data features. The paper presents an XML data integrity model named as CSR (content integrity, structure integrity, context referential integrity) based on a concatenated hash function. XML data content integrity is ensured using an iterative hash process, structure integrity is protected by hashing an absolute path string from root node, and context referential integrity is ensured by protecting context-related elements. Presented XML data integrity model can satisfy integrity requirements under situation of fine-grained security, and compatible with XML signature. Through evaluation, the integrity model presented has a higher efficiency on digest value-generation than the Merkle hash tree-based integrity model for XML data.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
