一种简单的Web服务安全通信模型研究  

Study on a Simple Web Service Secure Communication Model

作　　者：李程程[1] 张永胜[1] 李静[1] 刘广钰[1] 

机构地区：[1]山东师范大学信息科学与工程学院,山东济南250014

出　　处：《计算机技术与发展》2010年第9期157-160,208,共5页Computer Technology and Development

基　　金：山东省自然科学基金项目(Y2008G22)

摘　　要：介绍了Web服务通信安全需求以及目前常用的安全通信技术,并详细介绍了XML数字签名和XML加密机制,包括二者的基本结构及使用方法等,同时介绍了现有的几种安全通信机制如防火墙、SSL。针对Web服务的安全需求,包括数据机密性、完整性等,根据现有的安全通信机制以及WS-Security规范提出一种简单的安全通信模型。模型应用XML数字签名和XML加密技术,并对SOAP消息进行扩展,加入时间戳和随机安全序列号来唯一地标识用于通信的SOAP消息,基本保障Web服务通信的安全。Introduced the Web services＇ communication security demands as well as the present secure communication technologies,and introduced XML digital signature and XML-encryption in specific,including their basic structure and the methods how to use them,at the same time,introduced several existing secure communication mechanisms such as firewall and SSL.Proposed a simple secure communication model according to WS-Security and the existing secure communication mechanisms in view of the Web services＇ security requirements.The model applied the XML digital signature and the XML encryption technologies,and expanded the SOAP message by adding timestamps and random security series numbers to identify the SOAP messages used for communication uniquely,and the model can guarantee the basic security of Web services＇ communication.

关 键 词：WEB服务 XML数字签名 XML加密 WS-SECURITY 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]