SOAP消息多密级安全的研究与设计  

Research and design of SOAP multilevel security

作　　者：胡杰青[1] 王福喜[1] 徐东华[1] 

机构地区：[1]华北计算技术研究所,北京100083

出　　处：《计算机工程与设计》2013年第5期1593-1598,共6页Computer Engineering and Design

基　　金：国家"核高基"(核心电子器件;高端通用芯片;基础软件产品)重大科技专项基金项目(2010ZX01041-001-001-002)

摘　　要：为了满足多密级、特殊密码环境下的Web服务安全性,分析了SOAP消息多密级安全的实现原理,提出了SOAP消息多密级安全标识协议和SOAP消息多密级安全保障协议,设计并实现了一个基于上述协议的SOAP消息安全模型。该模型利用多密级密码服务接入技术,实现了SOAP消息多密级安全保障,验证了多密级安全协议的完整性、可用性。In order to realize the web services security in the multilevel security and special cipher environment, the principle of SOAP multilevel security is analyzed, and the expand specification of SOAP multilevel security polices and the specification of SOAP multilevel security are proposed. Based on the above specifications, SOAP security model is designed and implemented, and rely on the use of multilevel cipher services access technology, the SOAP multilevel security is guaranteed. Using the model can validate the integrity and availability of above specifications.

关 键 词：多密级 简单对象访问协议 WEB服务安全 XML签名 XML加密 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]