Web服务安全体系结构研究

Study of web services security architecture

随着Web服务的普及,构建解决其各种安全问题的安全体系结构研究变得非常有意义。在分析了Web服务的基本组件、协议以及Web服务所需要的安全保证之后,提出了一种分层的安全体系结构。该体系结构充分利用了现有的安全技术和设施,综合了传输层次和SOAP层次上的安全措施来保证Web服务的安全。另外还对各层次上应采取的措施和应达到的安全性要求做了详细的分析。

With the popularization of web services, it becomes very meaningful to research into the building of the security architecture that can solve various security problems of the web service. After the basic components and protocols of web services are analyzed, a kind of layered security system architecture is presented. This system architecture makes full use of existing security technologies and facilities, and integrates security measures both on transport layer and SOAP layer to ensure the security of web services. The measures that should be taken on and the security that should be achieved are also analyzed in detail.