基于SOAP协议的Web Service安全基础规范(WS-Security)

SOAP-based Fundamental Security Specification of Web Service(WS-Security)

讨论了WebService现有安全解决方案存在的问题,阐述了WS Security规范的内容和架构,以及对此的解决方法;随后给出了一个在WS Security框架内进行安全信息交换的实例;最后,介绍了WS Secu rity现有的实现以及未来的发展方向。

The paper first discusses the limitation existing in current solution of Web service security and introduces the content and framework of WSSecurity and its solution to this issue. Then it uses an example to illustrate how to exchange secure message according WSSecurity specification. Finally it introduces an available implementation of WSSecurity and the direction of WSSecurity in the future.