Abstract: Based on the Public-Key Infrastructure (PKI) system and asymmetric encryption algorithm, the traditional XML signature has many drawbacks such as complex management process and high computational cost. By the research of XML signature syntax and Identity Based Signature (IBS) scheme without a trusted third-party, the author realized a new XML signature based on the above IBS system and Weil pairing correspondingly，and designed the corresponding XML signature process and structure of XML signature according to the XML signature syntax. The new XML signature overcomes the drawbacks of traditional signature based on the PKI with good security and high efficiency.

Key words: XML digital signature

摘要： 传统XML数字签名基于公共密钥基础设施（PKI）体系和非对称算法，存在管理复杂、计算量大等缺陷。通过对XML数字签名规范和无可信第三方基于身份的签名(IBS)方案的研究，采用无可信第三方IBS的密钥管理机制和对应椭圆曲线双线性映射算法实现XML数字签名，按照XML数字签名规范的要求，对相应XML数字签名实现过程和XML数字签名文件结构进行了设计，并分析了具体实现方式。该XML数字签名方案在保证安全性的同时，克服了传统基于PKI的XML数字签名的缺陷，具有更高的效率。

关键词: XML数字签名, 基于身份的签名, CZK方案, 双线性映射, 密钥, Identity Based Signature (IBS), CZK scheme, Weil pairing, key