基于Web services的XML引擎安全模型研究  

Research of XML engine security model on Web services

作　　者：张艳[1] 周明天[1] 佘堃[1] 

机构地区：[1]电子科技大学计算机学院,成都610054

出　　处：《计算机应用研究》2008年第7期2161-2163,2170,共4页Application Research of Computers

基　　金：国家科技支撑计划项目(2006BAH0204)

摘　　要：Web services提供软件接口,实现Internet上服务的调用。它以XML为基础,使用了基于XML语言的协议来描述要执行的操作或要与另一个Web服务交换的数据。SOAP是Web services的传输层协议,所有的SOAP消息均使用XML编码。XML engine是建立在Web service上的一种技术。在整个Web服务应用中,XML处于消息层的位置,而XML engine则针对Web服务应用中的XML进行操作,所以称做消息层网关。在XML engine平台上,通过动态共享对象(DSO)机制,将加密、解密、签名、验证、过滤等模块动态加载到Apache服务器上,实现对XML信息的消息层过滤,保证了Web services的安全。此技术可以应用于在一切基于XML的数据过滤,并不限于对SOAP包的过滤。Web services provide interface access to the software. And the interface realizes the calls of services on the Internet. Web services are based on XML, They make use of XML-based protocols to describe operations to be performed and data to exchange with one another regardless of location and operating systems. SOAP is a transfer protocol of Web services whose mes- sages have universally adopted XML as the mechanism for encoding data. XML is located at message layer in the whole Web services application. XML engine deals with XML data in the Web services, therefore it is named the message layer gateway. On the XML Engine platform, with the help of DSO mechanism, it can dynamically load the encryption, decryption, digital signature, validation, and filtrtion modules into the Apache server. XML Engine can filter the XML data to make sure the safety of Web services. Meanwhile, it is not only applied to SOAP package, but also to any situation relating to XML filtration.

关 键 词：网络服务 可扩展标记语言 XML引擎 过滤 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]