基于Axis的Web服务认证模块的设计和实现

Design and Implementation of Axis-based Web Services Authentication Module

WebServices为企业系统集成、电子商务等提供了规范的、开放的分布式应用环境。但现有的安全机制不能满足WebServices体系的安全需求,身份认证是安全问题中的一个基本问题,利用ApacheAxis提供的Han dler机制,设计和实现了一个认证模块,使服务使用者和服务提供者在不对原有代码作任何改变的条件下完成身份认证。

Web Services provide a standard and open distributed application environment for enterprise system integration and electronic commerce. But the existing security mechanism cannot suffice for the security requirement of Web Services architecture. Identity authentication is a foundation problem of security. In this paper, we design and implement an authentication module based on the Handler mechanism of Apache Axis, so as to accomplish the identity authentication between service user and provider without altering the present code.