The Research Of Web Services Security Based On XML

Web Services is thought much of and supported by many organizations as a rising technology. A new challenge is brought up for Web Services Security. A solution is discussed for Web Services Security using Authentication and XML Encryption.In the paper, we review the current state of network security and security technologies, and then illuminate the origin and development of Web Services. XML, SOAP, WSDL and UDDI used in Web Services have been analyzed and questions of Web Services Security have been researched. Based on it, the solution is brought up for Web Services Security using Authentication and XML Encryption.The Solution of Web Services Security is composed by two parts: Authentication and XML Encryption. User' s Identity is attested through XML Signature and X. 509 Certificate. SOAP message with XML format is transmitted in Web Services, and XML itself is the technology for structuring data, and therefore XML-based encryption is the ideal way to handle complex requirements for security in data interchange applications. XML Encryption provides end-to-end security for applications that require secure exchange of structured data.The author develops three application tools for implementing the solution. Certificate Management Tool is used to provide and manage a pair of keys and X. 509 Certificate. SOAP Security Configure Tool is used to produce the secure configurable document for Web Services. Web Services Publish Tool is used to produce Web Services document and publish Web Services.PD (Product- Directory) is introduced as a practical example using Web Services. The solution of Web Services Security is applied in it, so the PD system security is guaranteed.Finally, some conclusions and prospects for Web Services Security are given.