Demonstration Procedures

Input business data to be carried by XML Generate XML document for business data Sign the XML Encrypt the XML Signature Dispatch to SOA end-point and decrypt the protected request Verify XML Signature Inquire Repository

Enveloping XML

Problems Enterprise application integration (EAI) requires sending of sensitive business data Transient data in plain has to be protected from unauthorized tampering and ensure data integrity XML is the standard in EAI, development of XML digital signature generation modules is not trivial and signature generation process itself is resource intensive that should not be embeded in business applications Solutions Spitfire SOA provides turn-key XML security with least integration efforts Sensitive XML data protected by Spitfire XML are assured in integrity and sender authenticity Demonstration In this demonstration, we will show you how to make use of Spitfire XML to enhance security of XML documents by enveloping XML standard We will try to similate the use of XML to carry shipping order business data and how potential tampering will alert recipient Continue

Background Technology Information

W3C XML Signature Syntax and Processing http://www.w3.org/TR/xmldsig-core/ IETF XML Signatures Page http://www.ietf.org/ids.by.wg/xmldsig.html IETF/W3C XML Signature Working Group http://www.w3.org/Signature/