基于SAML的协同电子商务安全服务系统

SAML-Based Cooperative e-Commerce Security Service

如何提高跨企业边界的安全信息互操作性,为电子商务交易提供协同安全服务,是目前电子商务安全服务研究的重点和难点。针对该问题,给出了一种基于SAML的安全数据交换服务和基于该服务的面向企业应用协作的协同电子商务安全服务系统。该系统采用了统一的基于XML的安全数据描述、服务访问接口定义和安全上下文传递;首次提出了基于SAML的数据交互服务,并以此为基础,构造了协同电子商务安全服务,不仅能够提供以企业为边界的关键资源保护,还可为跨企业的电子商务应用提供协同安全服务;基于SAML的安全数据交换服务提供了丰富的编程接口,企业遗留安全系统经过少许编程,就可以在其提供的服务的基础上,实现与其他安全系统间的数据互操作。

At present ,the emphases and difficulty of the research on e-Commerce security service is that,how to en-able interoperability between different systems that provide security services among the various Web sites involved in a e-business transaction.In this paper,the authors present a new SAML-based security information exchange service and a cooperative e-Commerce security service system for enterprise application integration.The system adopts XML-based in-terface describing,service -accessing definition and security context propagation,provides safeguard for key resources within a company and cooperative security service for e-business transaction among partners.By providing various appli-cation programming interface,the SAML-based security information exchange service enables the legacy security system interoperate with other SAML-aware systems by simple programming.