Web Services安全机制研究  

Study on Web Services Security Mechanism

作　　者：张锋军[1] 李勇[1] 牟其林[1] 

机构地区：[1]中国电子科技集团公司第三十研究所,四川成都610041

出　　处：《通信技术》2014年第7期821-825,共5页Communications Technology

摘　　要：Web Services作为实现SOA的主流技术标准,得到了广泛应用,其安全性值得高度关注。基于WS-Security标准,对Web Services的安全机制进行了研究,对Web Services安全防护的功能、遵循的标准进行了分析,并结合工程实践,从身份识别、SOAP消息安全防护和访问控制等方面提出了Web Services安全防护的实现方案,可以实现核心的安全防护功能,对基于Web Services技术架构的系统安全防护具有指导意义。Web services,as a mainstream technical standard for SOA implementation,has now been applied extensively,and its security is worthy of high attention. This paper studies the security mechanism of Web services based-on the WS-security standards,analyses the standards it follows,and describes the function of security services. It gives an applicable Web services protection solution from the aspects of identification,SOAP message security and access control based on engineer practice. This solution can implement the core security protection functions of Web services,and has directive significance for Web services-based SOA system＇s security protection.

关 键 词：WEB服务 安全服务 WS-SECURITY 简单对象访问协议 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]