基于XACML的Web服务信任协商方案  

Scheme of Trust Negotiation for Web Services Based on XACML

作　　者：王尚平[1] 马宏亮[1] 张亚玲[1] 王晓峰[1] 

机构地区：[1]西安理工大学密码理论与网络安全研究室,西安710048

出　　处：《计算机工程》2008年第11期137-139,142,共4页Computer Engineering

基　　金：国家自然科学基金资助项目(60273089);陕西省科学研究计划基金资助项目(2006F37)

摘　　要：针对Web服务中首次建立双方信任的问题,提出一种基于XACML的Web服务信任协商建立方案。利用XACML访问控制构建信任模型,给出信任协商策略描述,建立起基于XACML的信任协商架构,利用XML加密和签名来保证端到端的安全,提高了相互信任和策略的安全性。Aiming at how to establish firstly among Web services, a new trust negotiation scheme for Web services based on eXtensible Access Control Markup Language （XACML） is proposed. The trust model is constructed by using of XACML, and the description of negotiation strategies is provided, so the trust negotiation scheme based on XACML is fully built. The end-to-end security is protected with XML encryption and signature. The new scheme can be used to improve the security of trust among Web services and negotiation strategies.

关 键 词：WEB服务 可扩展访问控制标记语言 信任协商 协商策略 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]