Web服务安全机制研究  

Research of Security Mechanism for Web Services

作　　者：杨涛[1] 杨荣[2] 刘锦德[1] 

机构地区：[1]电子科技大学计算机科学与工程学院,成都610054 [2]北京青年政治学院,北京100102

出　　处：《北京工业职业技术学院学报》2005年第4期21-26,共6页Journal of Beijing Polytechnic College

摘　　要：作为一种面向服务的计算模式,Web服务具有松散耦合、与平台无关等优点,能简化跨组织应用的 共享与集成,得到了快速发展和应用。但同时,Web服务的许多方面都面临着安全挑战。介绍了Web服务 体系结构,分析了存在的安全问题,讨论了目前业界提出的安全机制,包括XML加密和签名,SAML, XACML,XKMS,WS-Security等,以及它们与传统安全技术的关系;最后提出了一种通过Security Authori- ty实现跨安全域交互的安全模型。As a service-oriented computing model, Web Services technology is loosely-coupled and platform-independent, and it simplifies the application integration between different organizations. At the same time, its inherent heterogeneity, dynamic and complexity bring many security issues. The paper introduces the Web Service structure as well as some common security threats that exist. It also presents the security mechanism widely used nowadays, including XML encryption and signature, SAML, XACML, XKMS and WS-Security. Finally a security model that supports cross-domain security interoperation by security authority is presented.

关 键 词：WEB服务 安全 机制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]