WEB SERVICE SYSTEM STRUCTURE BASED ON TRUSTED COMPUTING PLATFORM

摘要

By introducing trusted computing techniques into web service security mechanisms, a web service security framework based on trusted computing platform is proposed. It changes the original passive defense mechanism into active one. Combining the integrity of terminal platform and the trustiness of platform's identity, the measuring mechanism can effectively resist the security threats from "malicious terminal" and "risky terminal". "Trusted Connection Layer" in the framework bridges upper web application and the user. Trusted web access is achieved by adding Access Requester (AR) and Trusted Service Decision Point (TSDP) into the system.