Research And Application On SOAP Security

SOAP is a lightweight protocol and used for exchange of structural information in dispersive and distributing environment. SOAP defines a kind of extensible message process framework, which provides a kind of message structure that can exchange by many kinds of based protocol, with XML technology. SOAP provides a kind of simple, extensible and rich functional XML message process framework, which is used for definition of high level application protocol and provides higher interoperability in distributing environment.SOAP is the core of Web Service technology. With the continual grown up and development in electronic commerce fields, the security of SOAP becomes more and more important. As the core of Web Service technology, the security of SOAP takes the most responsibility of security of Web Service.This article analyzed SOAP deeply, include SOAP message process framework, expansibility, process model, protocol binding, RPC and encoding and SOAP types; Studied the application environment of SOAP-Web Service and XML Signature and XML Encryption particularly; Embedded XML Signature and XML Encryption into SOAP, making use of the expansibility of SOAP, extended SOAP in security aspect; And demonstrate the extends of SOAP in confidentiality, integrality, affirmance, identification and authorization. In the end, discussed the application of SOAP security, designed and implied a stock system prototype which is based on Web Service and the client of it is a windows form application and applied SOAP security in fund transfer module of this prototype, implied the application of SOAP security.The extending of SOAP in security can make up for the shortcoming of SOAP in security and enhance the security of Web Service, which is based on SOAP. It can also make the enterprise have confidence to accept Web Service, which is a new distributingcompute solution, and have important meaning for application of new technology.