Toward a Secure Web Service by Using WS-Security Specifications

摘要

Web services are server and client software application that communicate over the Web and internet, and run on a variety of platforms and frameworks. Therefore, web services provide a great interoperability and extensibility between different applications (web servicers) to achievecomplex operations. Thus, securing Web services is significant for any kind of distributed computing environment, such as web services. There are different methods and specifications for implementing and deploying security in web servicers. In this paper, a secure Web Service has been implemented,firstly by building a Web Service where the client enters an employee’s ID and then the service returns the employee’s information, which is stored within the service. Secondly, it shows how to secure a proposed Web Service using WS-Security specifications, including Signature,Timestamp and Username Token.