XML Digital Signature System Independent of Existing Applications

This paper describes a turnkey solution to add a XML digital signature capability withoutmodifying existing XML-based B2B systems. The signature proxy between applicationswatches for XML messages exchanged on the network. Outboundmessages are received by the proxy and automatically signed and by a signature server implemented as a Web service. Inbound messages are also verified by using the proxy and the signature server. The existing applications do not care about handling of digital signatures. The signature server can also provide (1) content-based key selection and (2) logging of signed documents with finegrain access control. The system introduced in this paper is called the XML Security Services Suite (XS-Cube), a set of security-related Web services including digital signatures.