数据交换传输安全模型设计及实现  

Design and Implementation of Security Model in Transmission of Data Exchange

作　　者：贾丽艳[1] 魏衍召[1] 

机构地区：[1]天津大学计算机科学与技术学院,天津300072

出　　处：《计算机技术与发展》2012年第1期209-212,216,共5页Computer Technology and Development

基　　金：天津市科技支撑计划重点项目(10ZCGYSF01300)

摘　　要：在Web Services应用中,保证数据交换传输的安全性和完整性非常重要,而当前技术下的Web Services却在安全性方面存在着一些不足。为了保护在Web Services中消息交换的安全传递,文中通过X.509证书实现了Web Services消息签名和加密,阐述了利用WSE3.0构建安全Web Services的方法,设计并实现了一种基于策略的可扩展系统安全架构,其中采用了证书管理、数据同步以及用户校验三种机制。在实现架构的过程中,将安全通信主体分为Web服务端和服务应用端,并通过对系统安全性的分析验证,证明此架构具有良好的安全性。随着信息化技术的发展,安全架构中安全策略的应用会越来越广泛和深入。It is vital to protect the integrity and security in transmission of data exchange of Web Services, while the Web data transmission is insufficient to be transmitted successfully and safely because of the current developing of Web Services. In order to protect the data security of message transmission in Web Services and aiming at an entire description of constructing a safe Web Services with WSE through the X. 509 certificate＇ s signatures and encryption, designs the system＇ s security frame, which uses three mechanisms of certificate man- agement, data synchronization and user validation. In the realization of the architecture, the secure communication parts are divided as the Web Service end and the service application end, and through ＂the analysis of system security, have proved that the structure enhances message transmission security of Web Services. With the development of information technology ,the security policy in security architec- ture will become more and more extensive and in-depth.

关 键 词：WEB服务 数字证书 安全 策略 

分 类 号：TP399[自动化与计算机技术—计算机应用技术]