一种新型的基于Web Services的企业应用集成安全架构  

A NEW SAFE FRAMEWORK OF ENTERPRISE APPLICATION INTEGRATION BASED ON WEB SERVICES

作　　者：袁书宏[1] 朱淼良[1] 云霞[1] 吴迪[2] 

机构地区：[1]浙江大学网络中心,浙江杭州310027 [2]浙江大学计算机学院,浙江杭州310027

出　　处：《计算机应用与软件》2008年第1期129-132,共4页Computer Applications and Software

摘　　要：传统的应用系统集成解决方案由于缺少统一标准的支持,在认证和授权等主要的安全性问题上也缺少明确的、统一的方法。针对这两个问题,提出了一种崭新的基于Web Services的应用系统集成安全体系架构WSSA-EAI,应用Web Services创建通用访问接口,结合了SSO的认证机制和RBAC的授权机制,提供了一种统一的且便于维护的EAI安全机制。Traditional Enterprise Application Integration （EAI） solutions lacking the support of the united standard have difficulties in re- solving the main security problems such as authentication and authorization. To solve these problems, a brand new application integration secu- rity architecture based on Web Services WSSA-EAI is proposed. Web Services are applied to create general access interface, and SSO（ Single Sign On） authentication and RBAC（ Role-based Access Control）authorization are combined. A united EAI security architecture which is easy for maintenance is presented.

关 键 词：EAI WEB Services认证授权SSO RBAC 

分 类 号：TP393.09[自动化与计算机技术—计算机应用技术]