Web服务安全模型研究与实现  

Research and Implementation of a Web Services Security Model

作　　者：孟伟[1] 张璟[1] 李军怀[1] 刘海玲[1] 

机构地区：[1]西安理工大学计算机科学与工程学院,西安710048

出　　处：《计算机工程与应用》2006年第26期134-136,共3页Computer Engineering and Applications

基　　金：西安市集成电路与软件专项项目(编号:ZX04011)

摘　　要：随着Web服务在分布式系统中的广泛应用,安全问题日益突出。论文基于WS-Security和WS-Policy协议,提出一个Web服务安全模型,并在.NET环境下,使用WSE2.0Web服务开发组件实现了该模型。该安全模型灵活、可扩展,既保证了SOAP消息端到端的安全性,又通过安全策略文件提高了Web服务的互操作性,可满足Web服务应用环境下的安全需求。With the wide use of Web Services in distributed systems,the issues of Web Services security are becoming increasingly prominent.A Web Services security model based on WS-Security and WS-Policy is proposed in this paper, which is implemented on .NET platform with WSE2.0 component.The model has the advantages of flexibility and extensibility,and can provide end-to-end security,also enhances the interoperability of Web Services by security policy, which can meet various requirements of security in Web Services application scenarios.

关 键 词：WEB服务安全 WS—Security WS—Policy WSE信息管理系统 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]