基于SOAP协议的能力开放平台安全中心的设计与实现

Design and Implementation of Security Center for OMP based on SOAP

现阶段,开放平台发展迅速,电信运营商旨在开放电信能力的能力开放平台也在迅猛发展。在开放平台本身和依托运行在开放平台上的应用之间的交互过程中,安全问题是必不可少的一个重要环节。在目前开展的业务中,对应用权限的鉴权和安全保证混合在一个网元,安全级别及通用性都较低,且难以实现应用鉴权和安全保证的解耦合。本文设计了一种基于SOAP协议的能力开放平台安全中心,设计了一个独立的安全保证网元,通过提供安全认证的WebServices,降低了开发的难度。

Open plateform is developing rapidly nowdays, and OMP （Open Mobile-Internet plateform） by China Moble Communication Co. Ltd is also on its commercial way. Safety is essential to the interaction process between the open plateform and the applications run on it. In current operations, authentication and security to ensure the applications＇ permissions are mixed in a network element, the level of security and versatility is low and it is difficult to achieve the decoupling of application authentication and security guarantees. This paper designed an Security Center of open platform based on the SOAP protocol. It used an independent safety assurance network element via the Web Services to provide security certification, to reduce the difficulty of development.