一种基于Axis2的SOAP安全传输模型的研究  

Research on a SOAP Security Model Based on Axis2

作　　者：李双江[1] 郝克刚[1] 葛玮[1] 

机构地区：[1]西北大学计算机科学系软件工程研究所,陕西西安710127

出　　处：《计算机技术与发展》2008年第11期142-145,共4页Computer Technology and Development

基　　金：国家"863"计划资助项目(2004AA115090)

摘　　要：目前Web服务体系架构存在标准限制且需要支持多种类型的客户端的问题,因而使得Web服务的安全极具挑战。SOAP构成了Web服务体系结构中的通信基础,WS-Security安全规范作为SOAP的扩展协议,是Web服务环境下最基础的安全协议。利用Apache Axis2结合Rampart组件实现了一个基于WS-Security的SOAP消息安全传输模型,从而为Web服务提供了一种消息级的安全解决方案。The current Web services architecture has standard limits and must supply to the multi - type client ends. How to protect the Web security services become very difficult. SOAP has been the underlying communication basic of Web services, WS- Security security specifications as extension of SOAP protocol, is the most foundation security agreement of Web services. A SOAP security transmission model was presented based on WS- Security .security specifications in this article, implementing Apache Axis2 and Rampart,which provided a kind of message level security solution for Web services.

关 键 词：WEB服务 SOAP WS-Securiry XML签名 XML加密 AXIS2 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]