Design And Application Of Web Text Secure Transmission Based On SOAP Protocol

With the continuous development of network technology, information security over network has been attracted more and more attention in recent years. As the basic network communication protocols, SOAP protocol plays a very important role in network security. The purpose of designing SOAP is to create a simple extensible framework for security applications through the existing standards and protocols, the author follows this idea and uses existing security technologies to design a security model for SOAP in a practical system.SOAP protocol which is developed on the basis of XML inherits almost all the characteristics of XML, it is platform-independent and can do well in data exchange in network environment. The existing SOAP message security mechanism is based mainly on the transport layer, but because of the technical drawback, it has limitations. So it requires us to use existing information security technology to extend SOAP protocol, in this way it can ensure that information can be transmitted over the network securely.As a major solution of information interaction between enterprises, SOAP has its own characteristics, such as confidentiality, integrity, non-repudiation, identification and authorization. Based on the five demands, this paper designs a extending SOAP message security framework and builds a reasonable system.Based on actual needs, firstly we design a system which is built on the server, the client and the database. It is a three-tier software system and uses XML to transmit information. Ensuring that the system can run correctly and stably, secondly we use the popular digital encryption and signature technology to extend SOAP protocol, in this way we design a SOAP security framework, and finally applied to the actual message in the system to make sure information can exchange securely.SOAP security system layer which is designed in this article is above the XML protocol layer, it is divided into analysis layer, encryption/decryption layer and construction layer. The analysis layer mainly provides data parsing on the SOAP message; the encryption/decryption layer provides encryption and decryption methods; the construction layer is to build new messages after SOAP protocol extending. After a large number of testing experiments, the SOAP security framework demonstrates that it has good scalability and interoperability, and makes a real protection of message transmission on the network security.