基于SOAP扩展的Web服务安全机制研究  

Research on Web Services Security Mechanism Based on SOAP Extension

作　　者：冯柳平[1] 

机构地区：[1]北京印刷学院信息与机电工程学院,北京102600

出　　处：《北京印刷学院学报》2009年第6期37-39,共3页Journal of Beijing Institute of Graphic Communication

基　　金：北京市教委科技发展计划面上项目(KM200710015011);北京印刷学院人才引进基金项目(E-d-07-08)

摘　　要：Web服务的安全性是电子商务中必须考虑的问题,SOAP协议是Web服务的核心协议,而SOAP消息是以XML文档的形式在信道中传输,可能要在中间节点进行驻留、转换,很容易被修改或泄露。为加强Web服务的安全性,根据SOAP安全扩展模型,采用XML数字签名和加密技术对Web服务的安全性进行扩展,保证了SOAP消息端到端传输的机密性和完整性,并可对用户进行身份认证。The security problem of Web services must be taken into count in E-Commerce. SOAP protocol is core of Web services. But SOAP messages transmit in channel with XML documents and can be modified or revealed easily because they may stay or be transformed in middle nodes. In order to enhance Web security, according to SOAP security extension model, XML digital signature and encryption techniques are adopted to extend security of Web services . It can ensure confidentiality and integrality of SOAP messages in end-to-end transmission,and can authenticate user identity.

关 键 词：WEB服务 SOAP扩展 XML数字签名 XML加密 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]