Abstract: Data integrity and non-repudiahon issues are common to current Web applications. To provide data integrity and non-repudiationfor these applicahons in this paper, we introduce the idea of form-signing, i.e., to digitally sign HTML form data using public-keycryptography. This tCchnology is implemented in a way that don't require significant changes to the already rurining Web architecture, it needsonly to adde a software module on the Web server side and let browsers to support Java applet. We study the main procedures of formsigning, some key points of the implementation, and further the works we need to do in the future. In our implementation, the SigningApplettakes charge of user signing of the text and verifcation of server's signature, and the SigningModule, which is added to Apache Web Server,does the server side signing.

摘要： 分析了当前万维网应用中所普遍存在的数据完整性和不可抵赖性问题，提出了解决这个问题的办法，并且讨论了表单签名的运村流程和实现要点，对今后表单签名技术的进一步发展和完善作了展望。

关键词: 万维网, 数据完整性, 数据不可抵赖性, 表单签名

CLC Number: 

• TP393.04