Method and apparatus for providing XML signature service in wireless environment

• US 20070136361A1
• Filed: 12/07/2006
• Published: 06/14/2007
• Est. Priority Date: 12/07/2005
• Status: Abandoned Application

• Current Assignee: Electronics and Telecommunications Research Institute
• Original Assignee: Electronics and Telecommunications Research Institute
• Inventors: Lee, Jae, Moon, Ki, Sohn, Sung, Chung, Kyo, Kim, Soo
• Application Number:
  US11/635,367
• Publication Number:
  US 20070136361A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures

Abstract

Provided are a mobile extensible Markup Language (XML) signature service providing apparatus and method. The mobile XML signature service providing apparatus includes: an XML message analyzing unit authenticating a mobile client, according to an XML signature template generation request or an XML signature verification request received from the mobile client; an XML signature processor generating an XML signature template and a SignedInfo element in a canonicalized format if the authentication is successful, and verifying an XML signature; and an encoder providing key information and at least one setting value for the generation of the XML signature template and verification of the XML signature, to the XML signature processor. Therefore, the mobile XML signature service providing apparatus and method provide authentication, integrity, non-repudiation, etc. with respect to messages received/transmitted in a wireless environment, are applied to a wireless environment having limited resources, are compatible with an XML signature for an existing wired environment that is to be applied to wired-and-wireless integration electronic commerce, and minimizes a change in an existing wired environment when a mobile XML signature is applied.

Claims

1. A mobile extensible Markup Language (XML) signature service providing apparatus comprising:

an XML message analyzing unit authenticating a mobile client, according to an XML signature template generation request or an XML signature verification request received from the mobile client;

an XML signature processor generating an XML signature template and a SignedInfo element in a canonicalized format if the authentication is successful, and verifying an XML signature; and

an encoder providing key information and at least one setting value for the generation of the XML signature template and verification of the XML signature, to the XML signature processor.

2. The apparatus of claim 1, further comprising a first cryptograph processor applying at least one communication channel security protocol to a message and information received/transmitted from/to the mobile client.

3. The apparatus of claim 1, wherein the XML signature processor does not insert a digital signature value into the SignatureValue element in the XML signature, when the XML signature template is generated.

4. The apparatus of claim 1, wherein, when the mobile XML signature service providing apparatus generates the XML signature templates the XML signature processor comprises:

a transform unit accessing a resource to which the XML signature is applied and transforming the resource;

a digest unit calculating and outputting a message digest value for the transformed resource;

a Reference element generator unit generating a Reference element including a Uniform Resource Identifier (URI) of the resource, a name of a transform algorithm, a name of a digest algorithm, and a digest value;

a SignedInfo element generator unit generating a SignedInfo element including information about a canonicalization algorithm applied to the SignedInfo element, information about a digital signature algorithm applied to the SignedInfo element, and the Reference element;

a SignedInfo canonicalization unit canonicalizing the SignedInfo element based on a canonicalization algorithm designated in the SignedInfo element; and

an XML signature generator unit generating a Signature element which is an upper most element of the XML signature.

5. The apparatus of claim 1, wherein, when the mobile XML signature service providing apparatus authenticates the XML signature, the XML signature processor comprises:

a first processor accessing and transforming a resource based on information provided by a Reference element in a SignedInfo element of an XML signature, calculating a digest value of the resource, and comparing the digest value with a digest value included in the Reference element; and

a second processor canonicalizing the SignedInfo element, reading public key information from the encoder, and verifying an XML signature value for the canonicalized SignedInfo element.

6. A mobile client supporting a mobile XML signature service, comprising:

a message transmitter generating an XML signature template generation request message including an option required for an XML signature, a resource to which the XML signature is applied, and information for mobile client authentication, and transmitting the XML signature template generation request message to a mobile XML signature service providing apparatus;

a Signature unit receiving an XML signature template and a SignedInfo element in a canonicalized format from the XML signature service providing apparatus, performing a digital signature on the SignedInfo element, and inserting the signature result value into a SignatureValue element of the XML signature template; and

an application interface unit outputting the XML signature to an application.service.

7. The mobile client of claim 6, further comprising a verification message generating unit generating and outputting an XML signature verification request message including an option required for verification, a resource to which an XML signature verification is applied, an XML signature that is to be verified, and authentication information, when an XML signature verification request is issued from a different mobile client.

8. The mobile client of claim 6, further comprising a second cryptograph processor applying at least one communication channel security protocol to a message and information received/transmitted from/to the mobile client.

9. A mobile XML signature service providing method comprising:

(a) requesting an XML signature template from a mobile XML signature service providing apparatus, according to an option indicated by an application, in a mobile client;

(b) authenticating the mobile client, then accessing a resource to which an XML signature is applied, and generating and transmitting an XML signature template and a canonicalized SignedInfo element to the mobile client; and

(c) Applying the digital signature on the SignedInfo element using a private key, and inserting a digital signature value to the SignatureValue element in the XML signature template, in the mobile client.

10. The method of claim 9, wherein in operation (a) an XML signature template generation request message including an option required for the XML signature, a resource to which the XML signature is applied, and information for mobile client authentication are generated.

11. The method of claim 9, wherein operation (b) comprises:

(b1) authenticating the mobile client;

(b2) if the authentication is successful, accessing and transforming the resource, and generating a digest value of the resource;

(b3) generating a plurality of elements required for generating the XML signature template; and

(b4) transmitting the XML signature template and the canonicalized SignedInfo element to the mobile client.

12. The method of claim 11, wherein operation (b2) comprises:

(b21) transforming the resource; and

(b22) performing message digest on the resource.

13. The method of claim 11, wherein operation (b3) comprises:

(b31) generating a Reference element including a URI of the resource, a name of a transform algorithm, a name of a digest algorithm, and a digest value;

(b32) generating a SignedInfo element including information about a canonicalization algorithm applied to the SignedInfo element, information about a digital signature algorithm applied to the SignedInfo element, and the Reference element.

(b33) canonicalizing the SignedInfo element based on a canonicalization algorithm applied to the SignedInfo element; and

(b34) generating a Signature element which is an upper most element of the XML signature.

14. The method of claim 9, wherein, if the XML signature is performed simultaneously on a plurality of resources, a Reference element for each resource is included in a SignedInfo element or in a Manifest element.

15. The method of claim 13, wherein, in operation (b34), the Signature element includes the SignedInfo element, a SignatureValue element, a KeyInfo element, and a Manifest element.

16. The method of claim 15, wherein the SignatureValue element does not includes a signature value.

17. A wireless XML signature verification method comprising:

(a) receiving an XML signature, generating a verification request message for the XML signature, and transmitting the verification request message to a wireless XML signature service providing apparatus, in a mobile client;

(b) authenticating the mobile client, verifying an XML signature based on a digest value and public key information, and transmitting the verification result to the mobile client, in the wireless XML signature service providing apparatus which receives the verification request message; and

(c) receiving the verification result and performing application-level processing based on the verification result, in the mobile.

18. The method of claim 17, wherein, in operation (a), the mobile client comprises generating an XML signature verification request message including information about whether a Manifest element has been verified, public key information, a resource to which the XML signature is applied, an XML signature that is to be verified, and authentication information.

19. The method of claim 17, wherein operation (b) comprises:

(b1) calculating a digest value of the resource, and determining whether the digest value is equal to a digest value included in a Reference element for the resource, thereby verifying whether data has been changed;

(b2) canonicalizing a SignedInfo element; and

(b3) reading public key information from a Keyinfo element, and verifying a digital signature value for the canonicalized SignedInfo element using a signature algorithm designated in the SignatureMethod element.

20. The method of claim 19, further comprising, if the mobile client requests verification of the Manifest element, verifying the Manifest element by applying operations (b1), (b2), and (b3) to each Reference element included in the Manifest element.