基于SOAP的细粒度访问控制模型

本文提出了一种符合SOAP消息的XML框架结构的安全规范。该规范利用SOAP的Header部分和XML技术，实现了对SOAP消息的XML元素和属性层次上的细粒度访问控制，减少了由于SOAP没有定义标准的访问控制安全规范而可能给应用带来的安全漏洞，一定程度上保证了基于SOAP的分布式网络应用系统的安全性和可靠性。

Fine-Granularity Access Control Model Based on SOAP

This paper proposes a security criterion with the XML frame architecture accordant with SOAP messages . Depending on the HEADER part of SOAP and XML techniques, this criterion is able to realize property level fine-granularity access control for the XML elements of SOAP messages. Thus, the security holes brought by undefined access control security criterion of SOAP will probably be reduced. The security and reliability of distributed network application systems based on SOAP are guaranteed to some extent.