基于SOAP的Web服务安全通信研究-管理科学与工程专业论文.docxVIP

山东师范大学硕士学位论文ABSTRACT 山东师范大学硕士学位论文 ABSTRACT Wcb Services are a kind ofcommunication specifications bt帆煳applications． They辨entirely built in the current standards of Intemet,with the advantage of loose coupling，cross-language and cross-platform．With the development of Web Services in e,=commerce and other fields,the security has b∞omc incrcaslngly importmant．As to the SlrUCRLrc based on message,the industry has a suit of transport layer security mechanisms．which have widely be accepted，．for example,the So咄Sockets Layer(SSL)and the Internet Protocol Security(IPSec)．However,being lack of the end-to-end protection,too-repudiation,selective protection,flexible authentication mechanism and message layer protection,the a凼cIil喀security mechanisms can not provide enough security of Web Services message in Web,seIviccs model．At the presem time,the specificalions嘲aled to security of Web S晰i懈message mainly havcWS·SccIltity,XKMS，SAML，SOAPSecurityExtension-DigitalSignature,etc．Thoug h these specifications can implement蛆fety of message in son把ways,they啪not provide a whole security solution,how to realize the model which has certain versatile s∞lⅡe communication in the Web Services application is key poim． This paper researchs the security of Web Services communications．Firstly,it researcbs the W曲services’Architecture and the∞∞smndard which support W曲 Services；Secondly,it reviews security requirements and the present correspondence startegy comprehensivelly；thirdly,it puts forward a 9自明玳communication process mechanism based 011 the communincation p∞∞豁．In ord盯to flihanoe the model’s sccufity；,it puts forward a method which en嗣JIe authentication and realizes SOAP message signature,encryption and decryption,realizes the SOAP authorization based on the role security,thus it solves the end-to-end SOAP message security problem bet3vefffl the selVi∞requester and the SeIViCe provider and guanmtes the messages confidentiality,intergrity,non-repudiation,authertication and authorization；Finall