METHOD FOR CREATING AND VERIFYING SIMPLE OBJECT ACCESS PROTOCOL MESSAGE ON WEB SERVICE SECURITY USING SIGNATURE ENCRYPTION

摘要

Disclosed is a method for creating and verifying SOAP messages in web service security using signature encryption. The SOAP message sender encrypts a signature used for SOAP message security with a secret key for encrypting data to be contained in the SOAP body. The encrypted signature is inserted in the security header of the SOAP header and sent to the recipient. The SOAP message recipient decrypts the encrypted key with his/her private key and restores the secret key. The restored secret key is used to decrypt the encrypted signature in the security header of the SOAP header, and the decrypted signature is used to verify the SOAP message.