Web Service SecurityOSGI相关书籍.pptVIP

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * WS-SecurityPolicy(4) conclusion (security related metadata) to supply all information necessary of building a secure message exchanging environment between the participants implementations Axis2 and CXF Web Service Security Specifications HTTP(S) XML/Schema XML Digital Signature SOAP/WSDL/WS-Address XML Encryption Web Services Policy WS Trust WS Federation WS Secure Conversation WS Security Policy Security Assertion Markup Language Web Services Security How to make trust across realms? WS-Federation (1) OASIS: /specs/#wsfedv1.2, Web Service Federation Language to federate different realms integrating existing security infrastructures leveraging the WS-* specifications requirements and capabilities are described by policies WS-Federation (2) concepts Federation: a collection of realms that have established a producer-consumer relationship whereby one realm can provide authorized access to a resource it manages based on an identity, and possibly associated attributes, that are asserted in another realm Identity Provider (IP): an entity that acts as an authentication service to end requestors and a data origin authentication service to service providers. It need to be trusted both by the requestor and the service provider Attribute Service: a Web service that maintains information (attributes) about principals within a trust realm or federation WS-Federation (3) concepts (continue) Authorization Service: A specialized type of Security Token Service (STS) that makes authorization decisions Digital Identity – A digital representation of a principal that is unique to that principal Realm or Domain: A representation of a single unit of security administration or trust Federation Metadata: a description of a single federation which is helpful for partners Pseudonym Service : a Web service that maintains alternate identity information about principals within a trust realm or federat