改进属性证书和WSDL的Web Services授权机制  

An Authorization Mechanism forWeb Services using an improved Attribute Certificate and WSDL

作　　者：曹鹏[1] 张永平[1] 

机构地区：[1]中国矿业大学计算机科学与技术学院

出　　处：《微计算机信息》2007年第24期48-49,110,共3页Control & Automation

摘　　要：Web Services使得基于XML技术的分布式计算成为可能,它被看作是将会替代现存的诸如CORBA、Java RMI和DCOM等旧的分布式应用解决方案的一种新兴技术。Web Services应用中的最为基本的问题就是Web Services的安全问题,它是诸多需要被解决的问题中的最为重要的部分,所以保障用户的验证、授权、信息的机密性、完整性和不可否认性就显得十分必要了。论文中,通过引进Web Services属性证书和对WSDL进行扩展的方法为Web Services用户提供了一种行之有效的用户授权方法。Web services make the distributed computing based on XML technology possible and are being watched with a new technology to replace the existing distributed computing such as CORBA,Java RMI,and DCOM.One of the issues those should be basically solved to deploy web services is just Web services security,It is necessary to satisfy the security features like user authentication,confidentiality,integrity,non-repudiation,and user authorization,In this paper,we design and implement a system that makes the effective authorization for web service users possible by using an attribute certificate for web services.

关 键 词：WEB SERVICES 属性证书 访问控制 验证 授权 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]