基于SOAP消息的Web服务安全模型研究

Research of Web Services Security Model Based on SOAP Message

随着Web服务应用的不断推广,其安全问题亟待得到更好的解决。论文在现有Web服务技术规范的基础上,设计了一个基于SOAP消息扩展的Web服务安全模型,该模型通过增加断言、签名与加密、令牌认证以及添加时间戳等方式处理SOAP消息,能够很好的保证Web服务消息在传输过程中的安全性,并利用WSE工具对Web服务消息级安全给予实现。

With the continuous promotion of Web services applications,its security issues must be a better solution.Based on the existing technologies and specification,this paper design a SOAP message-based Web Services security model,which deals with SOAP messages by increasing the assertion,signatures and encryption,token authentication,and add time stamps,etc.,and can better ensure that Web service messages security during transmission,and ultimately this paper have Web Service message-level security to be achieved with the use of WSE tool.