組織變革活動系絡與變革成效之探討

Size: px

Start display at page:

Download "組織變革活動系絡與變革成效之探討"

羊广
7 years ago
Views:

1 XML/EDI ( ) WTO (Organization of World Trade) EDI (Electronic Data Interchange) HTTP (Hypertext Transport Protovol) MIME (Multipurpose Internet Mail Extension) XML (extensible Markup Language) EDI Rosettanet PIP (Partner Interface Process) EDI XML S/MIME (MIME-base Secure EDI) EDI MIS S/MIME v3 XML XML S/MIME XML/EDI EDI EOI (EDI over Internet) XML/EDI XML/EDI Group 800

2 EDI XML [29] PGP/MIME (Pretty Good Privacy/Multipurpose Internet Mail Extension) PEM/MIME (Privacy Enhanced Mail/Multipurpose Internet Mail Extension) S/MIME (MIME-base Secure EDI) MIME HTTP SSL (Secure Sockets Layer) XML EOI XML XML HTTP S/MIME EDI EDI X.12 EDIFACT (EDI For Administration, Commerce and Transportation) [1][2] EDI [14]

3 XML/EDI HiTrust [13] 299 EDI 7800 / EDI over Internet (EOI) EOI EDI XML XML EDI Group[29] Rosettanet [25] Rosettanet 400 XML EOI (WWW, World Wide Web) ( ) (FTP, File Transfer Protocol) [3][5][11] MIME WWW FTP

4 EOI Sniffer SessionWare Windows2000 Network Monitor EDI RFC1767[19] EDI RFC1767 PGP/MIME[21] PEM/MIME[15][18][22][30] EDI EDI Over Internet [3][6][7][9][11] XML RTF (Rich Text Format) RTF XML XML DTD (Document Type Definition)XML DTD DTD DTD XML XML XML XML DTD

5 XML/EDI 187 XML DTD XML [28] XML HTML SGML (Standard Generalized Markup Language) XML XML Web XML SGML HTML 1.XML SGML Web SGML 155 XML 35 2.XML HTML (XLL, Extensible Linking Language) 3.XML (XSL, Extensible Stylesheet Language) XSL SGML XML XML XML Key) (Asymmetric Key)

6 (PKI, Public Key Infrastructure) (Key Escrow) (Key[8, Recovery) 12] HTTP Secure Socket Layer (SSL) SSL Netscape SSL SSL 3.0 SSL 3.0 SSL MD5 RC4 (Ex RC4 128 SSL 128 SSL Internet Explorer RSA (Rivest-Shamir-Adleman) [23] MIME PEM/MIME PGP/MIME S/MIME PGP/MIME 1991 Phil Zimmermann[21] Freeware Internet PGP RSA [12] 384 bits 512 bits 1024 bits 512 bits 768 bits 1024 bits MD5 (Message Digest 5) 128bit (Hash Code) RSA 128 bits (Session Key) IDEA (International Data Encryption Algorithm) RSA (Public Key)

7 XML/EDI 189 PEM/MIME[15, 18, 22, 30] PEM/MIME RFC1421 RFC1422 RFC1423 RFC1424 Request For Comment (RFC) RFC1421 RFC1422 [30] RFC1423 [18] RFC1424 [15] PEM/MIME MD2 MD5 RSA DES (Data Encryption Standard) triple DES (Electronic Codebook) 128 bits DES RSA (Public Key) Session Key DES triple DES PEM/MIME X.509 (Certification Authorities, CA) S/MIME[17] MIME PKCS#1 PKCS#7 PKCS#10 Request For Comment RFC2630 RFC2631 RFC2632 RFC2633 RFC2634 MD5 SHA1 RSA RC2 (40 bits) triple DES X.509 S/MIME v3 S/MIME RFC2634 S/MIME

8 v2 S/MIME v3 S/MIME v2 S/MIME v3 S/MIME v2 RFC S/MIME V3 S/MIMEv3 RFC RFC2630[26] RFC2631[20] Diffie-Hellman RFC2632[16] S/MIME (Certificate Handling) S/MIME X.509 RFC2633[17] S/MIME RFC2634[24] S/MIME S/MIME v2 (security labels) (secure mailing lists) (signing certificates) S/MIMEv3 MD5 SHA-1 (Hash Code) Diffie-Hellman RC2 (40 bits) triple DES RFC2632 X.509 CA (Certification Authority) (SignedData) (Header) (Cerificate) (SignedInfo) S/MIME

9 XML/EDI 191 Diffie-Hellman (Key Pair Generatio 128bits RFC2633 RFC bits 768 bits 1024 bits Chain council, SCC) SCOR (Supply Chain Operation Reference-model) [27] (Source) (Mark) (Deliver) Rosettanet Rosettanet [25] XML EDI

10 XML-Based e-business Standard Structure Company A Company Specific Processing & Data Internet and XML Company B Company Specific Processing & Data E.g. SAP E.g. Oracle (Business Process) (Business Document) (Vocabulary and Dictionary) (Messages) Implementation Framework (Transport Protocol) RosettaNet [25] Rosettanet Rosettanet RNIF (RosettaNet Implementation Framework) Dictionaries PIPs (Partner Interface Process) RNIF RosettaNet XML RosettaNet RosettaNet RosettaNet PIP XML PIP

11 XML/EDI 193 PIP Operational View, BOV) (Functional Service View, FSV) (Implementation Framework View, IFV) RosettaNet PIP 3A1 RosettaNet PIP 2A2 (Network Agent) (Business Service) 3A1 1.Service-Agent-Service interaction configuration Services agents services service 2.Service-Service-Agent interaction configuration service agent mailbox 3.Agent-Service-Service interaction configuration service-to-service agent-service

12 SSL Rosettanet PIP 2A2 : Product Information User : Product Information Distributor START [FAIL] <<Query Response Activity>> Query Product Information [SUCCESS] <<Secure Flow>> Product Information Response END FAILED <<Secure Flow>> Product Information Query Process Product Information Query Rosettanet PIP 2A2 Query Product Information Rosettanet Rosettanet Rosettanet XML S/MIME XML Secure HTTP EDI Rosettanet XML/EDI Rosettanet

13 XML/EDI 195 PGP/MIME PEM/MIME S/MIME Secure HTTP MIS XML XML DTD S/MIME DTD S/MIME Internet S/MIME HTTP HTTP XML/XSL SSL XML/XSL SSL HTTP HTTP Internet Secure HTTP

14 Windows 2000 server IIS 5.0 Visual Basic 6.0 Microsoft SQL 2000 ADVAPI32.DLL XMLDOM XML Pentium IV 10GHz CPU MIS S/MIME / XML XML

15 XML/EDI 197 Rosettanet XML DTD S/MIME v3 DTD XML S/MIME S/MIME v3 Microsoft advapi32.dll Session Keys Triple DES ; SHA-1 Diffie-Hellman SMTP (Simple Mail Transport Protocol) POP3 (Post Office Protocol 3) 128 bits 128 bits RFC bits 8 RFC bits 8 8 RFC2633 Secure HTTP HTTP Secure HTTP SSL

16 SSL 3.0 HiTrust [13] SSL v3.0 Netscape Navigator Microsoft Explorer SSL CA VeriSign SSL VeriSign SSL VeriSign IIS 5.0 Request.ServerVariables IIS 5.0 XML XML XML SQL 2000 URL XML +from+product+for+xml+root=root XML XMLDOM VB Script XSL

17 XML/EDI 199 ASP

18 Rosettanet PIP2A2 Product Information Query Message S/MIME S/MIME Rosettanet PIP2A2 Product Information Response Message XML T1 512K/64K ADSL ADSL EDI EDI EDI EOI

19 XML/EDI 201 EDI EOI EDI EOI EOI ADSL EDI S/MIME v3 Secure HTTP MIS XML/EDI EOI plain EOI EOI S/MIME Secure HTTP MIS 85% Secure HTTP Secure/MIME MIME XML MIME S/MIME PGP/MIME PEM/MIME

20 XML/EDI EDI XML XML Schema Xlink XML DTD XML S/MIME SSL 1. EOI EDI VAN Center EDI 2. Secure HTTP S/MIME 3. XML/EDI XML/EDI XML/EDI XML/EDI 4. RosettaNet XML/EDI DTD 5.

21 XML/EDI 203 S/MIE Secure HTTP RosettaNet PIP XML XML XML RosettaNet XML (GlobalCurrencyCode) ISO XML RosettaNet XML XML XML

22 EDI RosettaNet XML Diffie- Hellman RSA triple DES XML XKMS S2ML RosettaNet XML XML RosettaNet XML DTD XML Schema XML EDI XML/EDI XML/EDI EDI XML ebxml SVG (Scalable Vector Graphics) Xlink (XML Linking Language) XR2 (XML Registry and Repository) XQL (XML Query Language) XSLT (Extensible Stylesheet Language Transformations) XMTP (extensible Mail Transport Protocol) SMIL (Synchronized Multimedia Integration Language) XML DTD XML XML

23 XML/EDI 205 EDI MINE EDI 1999 ) MIME VERISIGN /frontend/default.asp B.Kaliski, "Privacy Enhancement for Internet Electronic Mail:Part IV: Key Certification and Related Services", RFC1424, B.Ramsdell, "S/MIME Version 3 Certificate Handling", RFC2632, B.Ramsdell, "S/MIME Version 3 Message Specification", RFC2633, D.Balenson, "Privacy Enhancement for Internet Electronic Mail:Part III: Algorithms, Modes, and Identifiers", RFC1423, D.Crocker, "MIME Encapsulation of EDI Objects", RFC1767, E.Rescorla, "Diffie-Hellman Key Agreement Method", RFC2631, P.Zimmermann, "PGP User s Guide", Massachusetts Institute of Technology, J. Linn, "Privacy Enhancement for Internet Electronic Mail:Part I: Message Encryption and Authentication Procedures", RFC1421, Microsoft, "IIS Server - - ", /servers/iis/products-5.htm. P.Hoffman, "Enhanced Security Services for S/MIME", RFC2634, Rosettanet, "RosettaNet Overview",

24 R.Housley, "PKCS#7: Cryptographic Message Syntax",RFC2630, Supply-Chain Council, "SCOR Overview", W3C, "Guide to the W3C XML Specification ("XMLspec") DTD, Version 2.1", XML/EDI Group, "XML/EDI Group", S. Kent, "Privacy Enhancement for Internet Electronic Mail:Part II: Certificate-Based Key Management", RFC1422, The Study of Applying XML/EDI Integrated Technologies to Build the Mechanism of Message Exchange and Information Sharing between Supply Chain Firms ABSTRACT RUEY-KEI CHIU, SHIA-PING YU * As the approaching of global free trade, entering the Organization of World Trade (WTO) is one of the important policies of our government. It is highly possible that the competition among enterprises will become more challengeable after entering WTO in the near future. Therefore, the strategy of effectively making use of supply chain management and enhancing the exchange of electronic message will strengthen the competition advantages of an enterprise. Owing to the more flexibility of XML data format with the capability of integrating modern secure data transferring technologies, the data transferring and exchange by using XML technology with secure data mechanism to implement the SCM system is recognized by a lot of researchers as the most feasible solution to achieve this goal. In this paper, we propose an effective solution to integrate the technologies of XML and traditional EDI with S/MIME secure mechanism to implement a secure data transmission prototyping system. With this approach, we can achieve the goal to transmit the data on the Internet under lower cost with high security. A prototype of secure XML/EDI system which complies with S/MIEM version 3 for the supply chain management is implemented and presented. Thus, a new alternative of data transmission can be chosen for enterprises with their trading partners. The components of know-how used for implementation including buying, selling, and inventory system, XML/EDI data format conversion, and the use of secure system components will be discussed in this paper as well. The results and findings of this research incurred by the design of prototype is also discussed for the future reference to readers, later research, and enterprises to conduct similar research and implementation. Keywords: electronic data exchange, S/MIME, XML/EDI, electronic business, supply chain system. * Ruey-Kei CHIU, Associate Professor, Department of Information Management, Fu Jen Catholic University. Shia-Ping YU, Senior Software Engineer, Taipei Customs Office, Ministry of Finance, ROC.

2 SGML, XML Document Traditional WYSIWYG Document Content Presentation Content Presentation Structure Structure? XML/SGML 3 2 SGML SGML Standard Gener

2 SGML, XML Document Traditional WYSIWYG Document Content Presentation Content Presentation Structure Structure? XML/SGML 3 2 SGML SGML Standard Gener SGML HTML XML 1 SGML XML Extensible Markup Language XML SGML Standard Generalized Markup Language, ISO 8879, SGML HTML ( Hypertext Markup Language HTML) (Markup Language) (Tag) < > Markup (ISO) 1986 SGML