COA架构的安全策略与实现

Research and implementation of COA secure model

为解决COA应用的安全协作问题,基于VPN技术和WS-security技术,给出了COA架构下企业协作的一个安全模型。利用安全令牌、XML签名和加密等技术实现了SOAP消息的安全性,为企业间能安全地调用对方的服务提供了一个途径。同时利用隧道技术、身份认证技术以及密钥管理等技术,为公司间的合作实现了VPN的连接,提供了一套安全的点到点的服务机制。最后在Linux平台上实现了该安全模型的主要功能模块。

In order to further insure security of COA cooperation,this paper provides a security model under COA framework. Based on a connection between VPN and WS- security,the model uses security message,XML signature,and encoding technique to ensure security of SOAP message and hence provide a way for cooperative businesses to safely utilize each other ＇s computing capacity. Moreover,by employing tunnel technique, identification verification technique, and key management, the model successfully provides a VPN channel between cooperative businesses and a safe point- to- point service profile. At last,main service modules of the model are enforced on Linux platform.