Research On Web Service Security

Along with the development of Web Services, more and more enterprises use Web Services. With the rapid development and application of Web Service, Web Service security becomes more and more important.To guarantee Web Service security, people in the field of IT are researching and developing lots of XML-based security standards association with Web Services, and hope to resolve problems about identification, authentication, message-level data security. Nevertheless, the actual measures for securing Web Services can not protect Web Services adequately yet. In the field of Web Services research, it becomes a subject with important significance that construct a comprehensive solution for Web Service security.With the research on security standards association with Web Services, this essay brings forward a Web Service security model. In the model framework it implements SOAP message's security transportation, single sign-on identification and authentication across security fields.In the use of XML encryption, XML signature and timestamp, the model ensures the end to end security communication of SOAP message. For predigesting the identification of every accessing to Web Service, we apply Web Service single sign-on based on SAML. In consideration of the unconfirmability of Web Service requester's accessing requirements and the authentication flexibility of every Web Service, we design the mapping of user-role and role-rights, separating identification and authentication implement by SAML server and accessing controller in every Web Service provider.This model preferably assures the message's confidentiality, integrity, non-repudiation, and implement the identification and authentication to user.