基于Web Service的分布式网管系统的安全机制  

Security Mechanism in Distributing Network Management System Based on Web Service

作　　者：刘开[1] 李红辉[1] 陈旭东[1] 

机构地区：[1]北京交通大学网络管理中心,北京100044

出　　处：《北京邮电大学学报》2006年第S1期66-68,73,共4页Journal of Beijing University of Posts and Telecommunications

基　　金：国家"863计划"项目(2003AA112020)

摘　　要：介绍了Web service在分布式网管系统中的应用,引入了WS-security(Web service security)安全性规范.设计了一个涵括通信层和消息层的安全机制,其中通信层的安全使用了HTTP基本验证和安全套接字层(SSL)等传统技术,消息层的安全由XML加密、XML数字签名以及身份验证技术来提供保证.所设计的安全机制能满足网管系统安全性所需要的授权与验证、保密性、完整性、安全日志等要求.Application of Web service in distributing network manage system is introduced.WS-security(Web service security),as a new criterion of Web service's security it is introduced too.Involving communication layer and message layer,a security mechanism is designed.In this mechanism, HTTP basic authorization and secure socket layer(SSL) are used in communication layer to ensure security.XML encryption,XML signature and authorization technology are adopted to support the message layer.This security mechanism could satisfied all needs a network management system requests on security,such as authorization and verification,confidentiality,integrity and security log.

关 键 词：网络管理 WEB服务 安全机制 WS-SECURITY 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]