The Application Research Of Web Services Security Based On WSE3.0

Web Services provides a kind of services oriented architecture-SOA, Which is entirely built upon the current standards of Internet. It's distributed, loose coupling, and independent of platforms. With Web Services being used widely, its security has attracted more and more attention.Security is a complex problem. At the present time, the specifications related to security of Web Services mainly have WS-Security, WS-policy, XKMS, SAML, etc. Though these specifications can implement security of message in some ways, they can not provide an integrated security solution. Web Services requires a security solution for end-to-end application, including encryption, digital Signature, security management, access control and so on.First, this thesis analyzes security requirements of Web Services, and researches security of Web Services, including security technology, security specification and the latest development.Then, this thesis analyzes the policy framework and the work process of Web Services Enhancements 3.0, and illuminates the application of turnkey security policy assertion and custom policy assertion respectively.Next, through analyzing security model of WS-Security specification and its work principle, aiming at solving the security requirements of Web Services, a kind of Web Services security solution based on policy architecture is designed. This thesis provides the whole framework, describes the process of security message exchange, and indicates the advantages and the disadvantages of the solution.Finally, a Web Services security application system is developed on .NET platform with WSE3.0. This thesis introduces the architecture of the system and the realization methods aiming at security requirements, describes the realization of the basic security function modules, and illustrates the realization of the advanced security function modules.