一种Web服务通信安全的优化方案

摘要

Comprehensively applying Web services safety standards and now main Web service safety technology to optimize Web service structure can realizes Web service communication safety. The optimization service structure realizes identity authentication and authorization function by setting business gateway, and realizes confidentiality, integrity and nonrepudiation of the message by extending SOAP agreement Compared with the technology which focuses on the service structure extension and the technology which focuses on the agreement expansion to achieve Web service safe, this optimization scheme strengthens the communication security. Combined with the research results, the future research direction of the Web service safety is prospected.%综合应用Web服务安全标准,混合采用目前Web服务中的主要安全技术来优化Web服务架构,可实现Web服务通信安全.优化的服务架构通过设置业务网关实现身份验证和授权功能;通过扩展的SOAP协议实现消息传递的机密性、完整性和不可否认性.与侧重应用服务架构扩展技术和侧重应用协议扩展技术实现Web服务安全的方法进行比较,得出本优化方案加强了通信安全性.结合现有的研究成果,展望了未来Web服务安全的研究方向.