基于Web服务EAMS的性能及安全研究  

Research of performance and security in EAMS based on web services

作　　者：冉崇善[1] 郭贵礼[1] 

机构地区：[1]陕西科技大学电气与信息工程学院,陕西西安710021

出　　处：《计算机工程与设计》2012年第3期946-950,共5页Computer Engineering and Design

基　　金：国家自然科学基金项目(60672001);陕西省科学技术研究发展计划基金项目(2008K05-13)

摘　　要：针对使用Web服务构建EAMS(企业资产管理系统)时的实时交互性能差以及服务通信安全无法保证等问题,提出了基于序列化、数据压缩、数据加密和数字签名等技术的有效解决方案。该系统采用.NET框架的RemotingFormat序列化Web服务传递的数据集并对其压缩传输的方式,解决了实时性交互问题。通过对SOAP消息头的扩展,对SOAP消息进行加密、签名、添加令牌等操作,实现了Web服务通信的端到端的消息级安全。测试结果表明,基于Web服务的EAMS的实时交互性能和服务通信安全得到了有效保障。In view of the two key problems of poor real-time interaction performance and unsafe service communication in the EAMS （enterprise asset management system） based on web services, the effective solution based on serialization, data compres- sion, data encryption and digital signature is proposed. The RemotingFormat in. NET 2.0 frameworks is used to serialize and compress DataSet transferred between web services to improve the real-time interaction performance in system. The end to end message level security of web services is provided by expanding SOAP message header and processing the SOAP message with encryption, signature, addition token and other operations. The result demonstrates that, real-time interaction performance and service security of EAMS based on Web services are effectively guaranteed.

关 键 词：WEB服务 企业资产管理系统 实时性交互 数据压缩 服务安全 简单对象访问协议 

分 类 号：TP319[自动化与计算机技术—计算机软件与理论]