面向跨企业多方协同应用的Web服务安全模型  

Web Service Security Model for Cross-enterprise Multiparty Collaboration Application

作　　者：阮彤[1] 金志超[1] 

机构地区：[1]华东理工大学计算机科学与技术系,上海200237

出　　处：《计算机工程》2013年第2期55-60,66,共7页Computer Engineering

基　　金：国家"十一五"科技支撑计划基金资助重点项目"国际贸易经贸合作与流通促进关键技术研究"(2009BAH46B03)

摘　　要：现有的Web服务安全工具仅提供单个服务的安全策略配置功能,忽略了业务流程层面的安全需求。为此,提出一种面向跨企业多方协同应用的Web服务安全模型,将Web服务安全建模、部署与监控过程,融合到企业业务流程管理过程中。在此基础上构造基于Secure-WSCDL的建模工具、转换工具和监控工具,实现SOA架构下业务模型与安全建模在软件工程生命周期中的同步。通过简化的国际贸易进出口流程实例,验证了该模型与相应工具的有效性。Web service security tools nowadays provide security configuration functionality at single Web services level,neglecting security requirement from business process layer.A Web service security framework towards multi-party collaboration application is proposed in this paper,which incorporates the enterprise business process management with security processes including security modeling,deployment and monitoring.Corresponding modeling tools,converting tools and monitoring tools based on Secure-WSCDL are constructed,synchronizing business model and security model throughout the entire software engineering lifecycle in SOA architecture.It verifies the effectiveness of the model and the tools by the simplified international trade import and export process instance.

关 键 词：WEB服务 Web服务编排描述语言 消息交换模式 Web服务安全策略 Web服务安全联邦 电子商务 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]