基于Web Services的安全服务框架及其在数字化校园中的应用研究

Study of Web Services Based Security Service Framework and its Application in the Digital Campus

数字化校园建设既要整合已有的应用系统,又要扩展新的应用,同时必须实现信息的交互和共享,提供更广泛、深层次的信息服务,因此设计提供一个安全、可靠的安全服务框架是实现全校信息资源的整合解决的首要问题。这里首先根据数字化校园中对安全服务的需求,采用WebServices技术,设计了一个安全服务框架,详细讨论了该框架的功能模块;然后以统一身份认证服务为例,讨论其服务流程和服务之间信任以及可靠传输的实现。

The digital campus is to build an asynchronous collaboration platform on which bundle of legacy systems are integrated and new services are constructed. The goal of digital campus are capabilities and practices that enable the various students and faculties of a university to electronically and seamlessly exchange information, acquire and provide content, and communicate with each other. Thus, the first issue of information integration is to design and offer a secure, reliable security service framework. Based on the security requirement of digital campus and Web Services technology, a security service framework is designed. The function modules of this framework are described in detail. Then using universal identity authentication service example, how to implement the service flow, trust within services and reliable transmission are discussed.