Demonstration Procedures

Input business data to be carried by XML Generate XML document for business data Sign the XML Encrypt the Signature and dispatch to SOA end-point Decrypt the XML Verify XML Signature Inquire repository

Enveloped XML

Problems Enterprise application integration (EAI) requires sending of sensitive business data Transient data in plain has to be protected from unauthorized tampering and ensure data integrity XML is the standard in EAI, development of XML digital signature generation modules is not trivial and signature generation process itself is resource intensive that should not be embeded in business applications Solutions Spitfire SOA provides turn-key XML security with least integration efforts Sensitive XML data protected by Spitfire XML are assured in integrity and sender authenticity Demonstration In this demonstration, we will show you how to make use of Spitfire XML to enhance security of XML documents by enveloped XML standard We will try to similate the use of XML to carry bank transaction business data and how potential tampering will alert recipient Continue

Background Technology Information

W3C XML Signature Syntax and Processing http://www.w3.org/TR/xmldsig-core/ IETF XML Signatures Page http://www.ietf.org/ids.by.wg/xmldsig.html IETF/W3C XML Signature Working Group http://www.w3.org/Signature/