面向方面技术在Web服务安全组合中的应用研究

Web服务作为一种通过网络集成分布式异构应用的技术,它提供了一种松散耦合的软件开发模式,实现了粗粒度的软件重用。随着Web服务技术的深入应用,Web服务组合的概念应运而生,它通过将功能相对单一的多个Web服务按照一定粒度进行组合,可提供更为强大的服务功能。由于来自异构环境的不同Web服务实体间安全需求、安全能力、可信任程度间的差异,使得对Web服务组合安全性的研究成为了关注的重点。简述了Web服务组合的主要实现方式,指出了Web服务组合实现中面临的主要安全问题,重点分析了目前面向方面技术在Web服务安全组合实现中的应用,讨论了其实现上的不足及未来的研究动向。

Research on Aspect oriented technique application in web service secure composition

Web service technique integrates distributed and heterogeneous applications over the network by providing a loose-coupling software reuse model in coarse-granularity. With the extensive application of web service technique, the concept of web service composition emerges. Through compositing some web services with relatively simple functions in a specific granularity, it can provide more valuable service function.. On account of the differences of security request, security constraints and reliability among composition partners in heterogeneous environment, it makes the research of Web service composition security a new focus. This paper summarizes the main implement methods for Web service composition and points out its principal security issues. We focus on how to apply the aspect oriented technique to realize web service secure composition. The deficiencies of this technique and the future research directions are also discussed.