XML Trends of XML-Based Business Protocols ebxml Web XML ebxml UN/CEFACT EDIFACTOASIS XML Web W3C World Wide Web Consortium Abstract XML-based technologies such as the Electronic Business XML Initiative (ebxml) and Web services have been rapidly standardized as mechanisms for easily and dynamically integrating business processes between enterprises. ebxml is a joint project sponsored by the United Nations Centre for Trade Facilitation and Electronic Business (UN/CEFACT) and by the Organization for the Advancement of Structured Information Standards (OASIS). The ebxml standard architecture and technologies for business-to-business collaboration systems are currently being developed. On the other hand, concerning Web services, the World Wide Web Consortium (W3C) and other organizations have standardized distributed object bases on the Internet. ebxml and Web services have their own backgrounds, but similar technology elements such as a messaging system, a business registry, and interface definitions are being standardized. These standardization activities should be performed through mutual cooperation. This paper outlines the history of ebxml and Web services and the trends of their technology elements, including security. A-XML XML Web Web FUJITSU.53, 3, p.195-199 (05,2002) 195
XML IT EAI Enterprise Application Integration B2BI B2B Integration Web B2BIebXML SOAP Simple Object Access Protocol UDDI Universal Description, Discovery and Integration WSDL Web Services Description Language Web WebebXML Web B2BI 1995XML RosettaNet ITOTA AIAG 1999 11ebXML (1) UN/CEFACT EDI EDIFACT OASIS (2) XML e- B2B B2B 2001 5 ebxml1.0 ebxml OASIS UN/CEFACT ebxmlrosettanet AIAG OTAebXML 2000 5 W3C (3) SOAP1.1 NOTESW3C Notes 2000 9 UDDI2001 5 WSDL1.1 W3C NOTES IBM MicrosoftWeb ebxml Web ebxml -1 ebxml -1 Web Messaging Services Technical Committee Registry Technical Committee CPP/CPA Technical Committee UN/CEFACT ebtwg Messaging Services W3C XML Protocol WG SOAP Simple Object Access Protocol Registry UDDI Community UDDI Universal Description, Discovery and Integration CPP/CPA Collaboration- Protocol Profile and Agreement BPSS Business Process Specification Schema W3C Web Service Description WG WSDL Web Services Description Language 196 FUJITSU.53, 3, (05,2002)
XML ebxml Web 1 HTTP SMTP 2 3 レジストリ 2 企業 A 2 業界団体 1 インタフェース定義インタフェース定義 企業情報企業情報企業情報 メッセージング 4-1 Fig.1-B2B process model. 3 企業 B -1 A B AB Messaging Services Technical Committee ebxml W3C XML Protocol WG Web SOAP SOAP HTTP SMTPXML RPC Remote Procedure Call HTTP SOAP SOAP Header Body RPC SOAP ebxmlsoap Header ebxml SOAP Registry Technical Committee ebxml UDDI Web UDDI ebxml RegistryOrganization Object Object ClassficationNode FUJITSU.53, 3, (05,2002) 197
XML UDDIBusiness Entity Business Service Binding TemplatetModel B2BI UDDI UBR Universal Business Registry UBRWeb Web UBR PBR Private Business Registry ebxml BPSS Business Process Specification Schema CPP Collaboration Protocol Profile /CPA Collaboration Protocol AgreementWeb WSDL UN/CEFACT ebtwg Electronic Business Transition Working GroupebXML BPSS BPSS 2N Collaboration Protocol Profile and Agreement Technical Committee CPP CPA CPP CPA CPP CPA WebWSDL1.1 W3C Notes Web Service Description WG WG WSDL WSDL SOAP B2B 1 Authentication Authorization SSO Single Sign On SSOKerberos (4) SSO OASIS SAML Security Assertion Markup Language (5) SAML PKI Public Key Infrastructure Kerberos SSO SAML 2002 SAML XACML XML Access Control Markup Language (6) XTAML XML Trust Axiom Markup Language (7) SSO 2 IPSec IP Security TLS Transport Layer Security S/MIME Secure/Multipurpose Internet Mail Extensions (8) SOAP 198 FUJITSU.53, 3, (05,2002)
XML W3C SOAP-Dsig SOAP Security Extension Digital Signature (9) SOAP-DsigSOAP SOAP 3 XML XML (10) XML XML XML XKMS XML Key Management Specification (11) XML Web XKMS W3C 2002 11Verisign EntrustPKI XKMS ebxmlweb SOAP UDDI WSDL INTERSTAGE 1 ebxml http://www.ebxml.org 2 OASIS http://www.oasis-open.org 3 W3C http://www.w3c.org 4 The Kerberos Network Authentication Service V5 http://www.ietf.org/internet-drafts/draft-ietf-cat-kerberos-revisions-10.txt 5 Assertions and Protocol for the OASIS Security Assertion Markup Language http://www.oasis-open.org/committees/security/docs/draft-sstc-core-25.pdf 6 XACML Domain Model http://www.oasis-open.org/committees/xacml/docs/draft-xtc-use-domain-03.doc 7 XML Trust Axiom Markup Language Specification http://www.xmltrustcenter.org/research/docs/xtaml.pdf 8 RFC http://www.ipa.go.jp/security/rfc/rfc.html 9 SOAP Security Extensions: Digital Signature http://www.w3.org/tr/2001/note-soap-dsig-20010206/ 10 XML-Signature Syntax and Processing http://www.w3.org/tr/xmldsig-core/ 11 XML Key Management Specification http://www.w3.org/tr/xkms/ FUJITSU.53, 3, (05,2002) 199