Web Services安全机制研究

Web Services作为实现SOA的主流技术标准,得到了广泛应用,其安全性值得高度关注。基于WS-Security标准,对Web Services的安全机制进行了研究,对Web Services安全防护的功能、遵循的标准进行了分析,并结合工程实践,从身份识别、SOAP消息安全防护和访问控制等方面提出了Web Services安全防护的实现方案,可以实现核心的安全防护功能,对基于Web Services技术架构的系统安全防护具有指导意义。

Study on Web Services Security Mechanism

Web services,as a mainstream technical standard for SOA implementation,has now been applied extensively,and its security is worthy of high attention. This paper studies the security mechanism of Web services based-on the WS-security standards,analyses the standards it follows,and describes the function of security services. It gives an applicable Web services protection solution from the aspects of identification,SOAP message security and access control based on engineer practice. This solution can implement the core security protection functions of Web services,and has directive significance for Web services-based SOA system＇s security protection.