关键词: XML数字签名, 工作流, 多重签名, 部分签名, XPath

Abstract: In view of the demand for multi-signature and fine-grained signature in workflow systems, the authors proposed the "Signature on Signature" mechanism and put forward an application model of eXtensible Markup Language (XML) signature in workflow systems. In this model, the document to be signed was converted to XML format, and this facilitated the handling of the document for the system. In the processing of the XML document, every processing node signed and verified on the basis of the former processing node. In the end, a purchase approval workflow system was developed. Taking a typical purchase approval scenario for example, the validity and effectiveness of the presented model were verified, and a feasible solution was provided for the application of XML digital signature in workflow systems.

Key words: eXtensible Markup Language (XML) digital signature, workflow, multi-signature, partial signature, XPath