Web服务的安全机制和安全模型

THE SECURITY MECHANISM FOR WEB SERVICES AND A SECURITY MODEL

保证Web服务安全通信的机制有两种,传输级安全机制紧密耦合于下层平台,只能保证点到点的安全通信;而消息级安全机制能够提供异质环境的端到端安全保证。基于安全性令牌传播的安全模型是一个综合框架,与其它安全模型集成在一起能够使Web服务更安全。

There are two Security mechanisms for Web Services,transport-level security is tightly coupled to the underlying platform,and it only provide point-to-point secure guarantee,while message-level security could provide end-to-end secure guarantee in a heterogeneous environment.The security token-based security model describes a general architecture.The model can integrate other security models to make the Web Services more secure.