异构平台下Web服务安全交互的实现方法

Web Services security solutions on heterogeneous platform

异构环境下各Web服务平台都支持WS-Security规范,但各个平台在WS-Security规范的实现上又存在着一些差异,支持的证书也不尽完全相同。这就为异构平台Web服务的安全交互带来了问题。针对这一问题,文中分别研究了.NET和Axis2Web服务平台对WS-Security规范的支持,然后建立了一个针对这两个平台间Web服务的安全交互模型,最后通过实验给出了一种异构环境下Web服务的签名的实现方法,证明了该模型的可行性。

All Web Service platform in Heterogeneous environment support WS-Security standards.But there are some differences in realizing WS-Security of each platform,and support the certificate are not the same.It brings risks when Web service interacts.As to this,this article studies platforms for WS-Security in two ways：.NET and Axis2 Web.Then build a safe interaction model of web services between the two platforms.At last,this article gives a method of realizing web service signature in Heterogeneous environment and validates its usability.