Web Service安全技术研究  

An Research of Web Service’ Security

作　　者：乔波[1] 

机构地区：[1]解放军理工大学指挥自动化学院,江苏南京210007

出　　处：《信息安全与通信保密》2007年第8期139-141,145,共4页Information Security and Communications Privacy

摘　　要：信息技术的迅猛发展,使我们进入了面向服务的时代,Web Service正是这个时代的产物。它的兴起促进了分布式系统及异构系统跨平台的集成。但是,由于Web服务基础技术的原始规范中没有提到安全性的问题,这使许多领域不敢使用这一技术。庆幸的是,WS-Security规范的出现弥补这个缺陷。本文首先介绍了WS-Security规范,然后以.NET Framework平台为基础,提出了SOAP消息加密的实现方法。With the rapid development of information technology, the human society has entered a service-oriented age, and the Web Service is exactly the outcome of this age. lts rise has promoted the cross-platform integration of the distributed systems and the heterogeneous systems. However, the original technical norm does not provide safety in the Web Service, thus many domains dare not rashly use this technique .The emergence of WS-Seeurity norm for up this defect. This paper first introduces the WS-Seeurity norm in detail, and then proposes the implementaion method for SOAP message eneryption on the basis .NET Framework platform .

关 键 词：WEB SERVICE WS-SECURITY 消息认证 消息完整性:消息加密性 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]