基于Web Service的分布式网管系统的安全机制

介绍了Web service在分布式网管系统中的应用,引入了WS-security(Web service security)安全性规范.设计了一个涵括通信层和消息层的安全机制,其中通信层的安全使用了HTTP基本验证和安全套接字层(SSL)等传统技术,消息层的安全由XML加密、XML数字签名以及身份验证技术来提供保证.所设计的安全机制能满足网管系统安全性所需要的授权与验证、保密性、完整性、安全日志等要求.

Security Mechanism in Distributing Network Management System Based on Web Service

Application of Web service in distributing network manage system is introduced.WS-security(Web service security),as a new criterion of Web service's security it is introduced too.Involving communication layer and message layer,a security mechanism is designed.In this mechanism, HTTP basic authorization and secure socket layer(SSL) are used in communication layer to ensure security.XML encryption,XML signature and authorization technology are adopted to support the message layer.This security mechanism could satisfied all needs a network management system requests on security,such as authorization and verification,confidentiality,integrity and security log.