SOAP消息安全性分析及其加密、签名的实现

SOAP Message Security Analysis and Implementation of Encryption,Signature

首先针对SOAP消息的安全性问题进行了分析,指出了利用SSL传输SOAP消息的局限性。此外,文章依据WS Se curity等规范,在.NET平台上结合实例给出了对SOAP消息进行加密、签名的一般步骤和方法,从而在不安全的信道中实现了SOAP消息的安全通信。

This paper analyzes the security of SOAP message in detail ,and puts forward the disadvantage of transporting SOAP message using SSL. Based on the WS-Security specification, the paper also brings the general steps and methods forward by way of example at the .NET platform. Using these methods can implement the secure communication with SOAP message in the insecure channel.