Research Into And Apply Web Service Security In Community Health System

Community Health Service (CHS)is the comprehensive service that is based on the family as the unit, focused on health, taking people's life as its whole process, while serving mainly the old, the female, children, and the chronicle patients by integrating prevention, medical care, health care, recovery and health education. As the most fundamental element in the medical care system, it keeps the citizen's health information and other medical care information.Community health system is the MIS of CHS. Recently, along the continuously intensive and extensive development of the system, its function is getting more and more improved while the system is getting more and more complicated. As a result, various problems on security arise. For example, replay attack. Then how to deal with and solve these problems? These issues are key for CHS to posses its long-term vitality.Based on the above-mentioned problem, this paper concludes and analyses all the security needs of the Web service in the community health system and sets up the"security model of the web service".This paper proposes the Axis platform-based WSSF (web service security framework) for this model. The WSSF realizes such functions as user token, XML encryption and signature, X509 certificate and time-stamp, etc. By combination use of these functions, the following 5 security targets can be achieved: Authentication, Authorization, Data Integrity , Confidentiality and Non repudiation.The innovative significance of this paper lies in its analysis and modeling of web service security in the community health system, as well as the design and realization of Axis-based WSSF, which is quite flexibly deployed and configured.