Document-centric XML workflows with fragment digital signatures

TY - JOUR

T1 - Document-centric XML workflows with fragment digital signatures

AU - Brooke, Phillip J.

AU - Paige, Richard F.

AU - Power, Christopher

PY - 2010/7

Y1 - 2010/7

N2 - The use of digital document management and processing is increasing. Traditional workflows of paper forms are being replaced by electronic workflows of digital documents. These workflows often require multiple signatures to be added to the documents for authorization and/or integrity. We describe examples of digital workflows that illustrate problems with digital signatures: i.e. the use of digital signatures across entire documents results in signatures that can be unnecessarily invalidated by subsequent modification of the document. We propose the use of fragment signatures, which reduce unnecessary invalidation of signatures and enable greater concurrency in workflows. Our approach is document-centric and does not use a centralized database. We report on an implementation that allows fragment signatures over document fragments as well as the attachment (or embedding) of other documents. This allows collaborative or cooperative editing to occur on parts of a document without disturbing unrelated signatures. We describe the lessons learned from our deployments and offer further ways to embed such signatures into other document types. Copyright (C) 2010 John Wiley & Sons, Ltd.

AB - The use of digital document management and processing is increasing. Traditional workflows of paper forms are being replaced by electronic workflows of digital documents. These workflows often require multiple signatures to be added to the documents for authorization and/or integrity. We describe examples of digital workflows that illustrate problems with digital signatures: i.e. the use of digital signatures across entire documents results in signatures that can be unnecessarily invalidated by subsequent modification of the document. We propose the use of fragment signatures, which reduce unnecessary invalidation of signatures and enable greater concurrency in workflows. Our approach is document-centric and does not use a centralized database. We report on an implementation that allows fragment signatures over document fragments as well as the attachment (or embedding) of other documents. This allows collaborative or cooperative editing to occur on parts of a document without disturbing unrelated signatures. We describe the lessons learned from our deployments and offer further ways to embed such signatures into other document types. Copyright (C) 2010 John Wiley & Sons, Ltd.

KW - XML, workflow, digital signature, authorization

UR - http://www.scopus.com/inward/record.url?scp=77956363007&partnerID=8YFLogxK

U2 - 10.1002/spe.974

DO - 10.1002/spe.974

M3 - Article

SN - 0038-0644

VL - 40

SP - 655

EP - 672

JO - Software: Practice and Experience

JF - Software: Practice and Experience

IS - 8

ER -