基于Web服务的企业应用系统集成安全研究

Research on the Security of Web-based EAI(Enterprise Application Integration)

随着Web服务越来越广泛的应用,Web服务由于其对异构系统的优秀支持能力而克服了传统EAI缺乏标准、互操作性差的问题,正越来越受到人们的关注。但在安全性问题上,却缺乏统一标准和明确的实现方案。针对这种问题,提出了一种基于SSO+RBAC的安全解决方案,同时做到在Web服务下的无缝集成。

Along with the wide utilization, the Web service draws more and more attention of the human society because it has excellent support for heterogeneous systems and can solve the problems of the lack of standards and the poor interoperability of traditional EAI system. However, in the field of security, Web service has no unified standards and clear implementation scheme. IN the light of this situation, this paper puts forward a new solution based on SSO＋RBAC, which can realizes the seamless Integration under the Web service.