| Web services, which adopt general protocol and technology, can be easily accessed by users, but the downside of this easiness is that security is compromised.So the security of web services has been the research hotspot.In this paper, firstly, it presents the basic knowledge of XML and web services, XML web services techniques and XML related secure recommendations, and makes researches on several existed web services security specifications. It is finer that using secure techniques based on XML protect web services. For the implemention of web services security, it rebuilds an existed web application to a real Web Service consisted of service provider, service proxy, service requestor. After the rebuilding, the system satisfies the web services operation model.And then it implements the Signature of SOAP Message and the Encryption of SOAP Message.So it improves the security of end-to-end. At last, a scheme of trust negotiation for web services based on XACML is proposed.The main contents are:1. Rebuilding a traditional B2B web application to a real Web Service, including design,implemention and deployment.2. The implemention of the Signature of SOAP Message and the Encryption of SOAP Message to the message level.3. Proposing a scheme of trust negotiation for web services based on XACML. |
