基于联机手写签名和数字证书融合的Web Service身份认证研究  

An Authentication for Web Service Based on On-Line Handwritten Signature and Digital Certificate

作　　者：袁永峰[1] 李彬[1] 王宽全[1] 

机构地区：[1]哈尔滨工业大学

出　　处：《计算机科学》2004年第12期142-145,共4页Computer Science

基　　金：哈尔滨市科技攻关项目(2003AA1CG055-10)

摘　　要：手写签名是个人独有的生物行为特征,可以用来鉴别个人身份。本文提出一种基于联机手写签名和数字证书融合的Web Service身份认证方案,该方案把数字证书和所有者的生物特征相结合,有效地解决了验证数字证书的使用者和所有者是否是同一实体的问题。本文采用SOAP协议用XML数字签名和加密技术封装用户和服务器之间的通信消息,为Web Service的信息交换提供可靠保障。Handwritten signature is unique behavioral biometric characteristic of human and can be-used to identify users. This paper proposes a novel authentication scheme about Web Service that combines the digital certification with on-line handwritten-signatures, which provides a good solution to bind digital certificate with its owner by his biometrics. The information between the user and the server is encapsulated into SOAP messages with both XML digital signature and XML encryption and the transaction can be conducted securely on Web service.

关 键 词：手写签名 数字证书 身份认证 联机 SOAP协议 数字签名 XML 所有者 个人身份 用户 

分 类 号：TP393[自动化与计算机技术—计算机应用技术] TP334.23[自动化与计算机技术—计算机科学与技术]