基于XML Web服务的网上支付系统设计与实现  

DESIGN AND REALIZATION OF PAYMENT SYSTEM BASED ON XML WEB SERVICES

作　　者：王尚平[1] 牛鹏超[1] 张亚玲[1] 谢小琢[1] 

机构地区：[1]西安理工大学密码理论与网络安全研究室,陕西西安710048

出　　处：《计算机应用与软件》2009年第3期35-37,40,共4页Computer Applications and Software

基　　金：国家自然科学基金资助项目(60273089);陕西省科学研究计划资助项目(2006F37)

摘　　要：借鉴SET协议的基本思想,通过在SET协议支付流程中引入签名服务器代理客户签名,设计了一种适合中小型企业和低额交易大众市场的基于XML Web服务网上支付系统。支付系统使用Spring和Apache Axis2集成的实现方式,将Axis2Web服务安全模块Rampart、可插入式自定义模块和业务逻辑安全方面的三层模型作为安全解决方案。该系统具有较好的安全性、信息格式标准、数据交换良好、跨平台、可扩展的特点,为低额网上支付系统提供了行之有效的解决方案。Referring to the idea of SET protocol,a payment system based on XML Web services is designed,in which a proxy signature server that can be used to sign transaction information for customers in payment flow of SET protocol is introduced, the system is suitable for small or middle sized enterprises and commonalty market characterized in small among of money. The payment system＇ s framework is the integration of Spring and Apeche Axis2 with three layers mode which is composed of Axis2 Web services security module （Rampart）, user defined add-on module and business logic security aspect, the three layers mode is used as the security solution of the payment system. The payment system has the characteristic of preferable security, standard information format, better data exchange, composition and extensibility, and is an effective resolution for small amount Web payment system.

关 键 词：WEB服务 AXIS2 电子支付系统 WEB服务安全 

分 类 号：TP393.4[自动化与计算机技术—计算机应用技术] TP393[自动化与计算机技术—计算机科学与技术]