基于消息层的Web服务安全模型设计

Design the Security Model by Web Services Based on Message Layer

在网络越来越普及的情况下,安全问题就显得更加重要。数据通过开放的网络环境来进行传输,存在着严重的安全隐患。而传统的网络安全机制仅仅局限于Web服务的传输层和网络层,不能确保Web服务的安全。另外,Web服务本身范围的地域性和分布性,结构上的异构性,应用中的动态性等各种不确定因素,直接影响到数据传输的安全性,对数据安全性提出更为严峻的考验。该文在Web数据安全性方面做了一定的研究,主要从Web服务的安全和访问控制方面入手,针对Web服务的机密性、完整性、不可否认性以及身份验证和访问控制等方面的进行探究,并结合网络安全规范的相关技术,提出了一种解决Web服务数据层面的安全方案。

In the case of the network is becoming increasingly popular,security issues become more important.Data to be transmitted through an open network environment,there is a serious safety hazard.Traditional network security mechanisms confined to the transport layer and the network layer,Web services can not ensure the security of Web services.In addition,the web service itself range of regional and distribution,structural heterogeneity,dynamic applications such uncertainties direct ly affect the security of the data transmission,data security is more severe tests.Web data security,do some research,mainly from the Web services security and access control aspects for Web services,confidentiality,integrity,non-repudiation and au thentication and access control and other aspects of inquiry and related technologies combined with network security norms,proposed a solution to the Web service data level security solutions.