安全Web Services体系结构的研究  

Research on architecture of secure web services

作　　者：景建笃[1] 游晓黔[1] 

机构地区：[1]重庆邮电大学计算机学院,重庆400065

出　　处：《计算机工程与设计》2007年第5期1032-1034,1047,共4页Computer Engineering and Design

摘　　要：目前已有的Web Services安全规范只是制定了要实现某一安全需求应该遵循的规范协议,尚没有一个被广泛接受的安全体系结构。有很多学者和组织对安全Web Services体系结构做了有益的探索,并提出了一些方案与产品,各自有不同的特点并依据不同的安全规范。基于业界主导公司所推出的WS-规范提出了一个基于安全令牌服务器的安全WebServices体系结构,并对它的工作机制做了研究。At present, security specifications are published on web services only implement some aspects of all security problems, and there is not an architecture of secure web services being approved by most people. Many scholars and organizations have launched on useful researches for the architecture and have had some products in the light of different security specifications. Built on the WS-＊ proposed by leading companies in IT, an architecture of secure web services based on secure token service is presented.

关 键 词：WEB服务 安全令牌 WS-＊安全规范 安全会话 信任域 基于角色的访问控制 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]