Research On The Agent-based Authentication Protocol Model In The Web Service

Web Services apply wildly with Internet technology develops. The security of Web Services authentication became more and more important. So, it is important to design the authentication protocol model in the level of architecture.After analyzing the authentication security requirement and technologies sufficiency, a kind of agent-based authentication model in Web Services is presented to avoid the shortage of existing authentication methods, which realizes single sign-on function. The model describes the integration mechanism of agent and web service, which conclude design of agent and communication mechanism. At the same time, introduces Web Services apply process, agent authorization protocol, agent registration protocol and agent logout protocol in the security domain. The model also describes the access authorization combine the security domain technology.To improve the security and efficiency of authentication in Web Services, Agent-based authentication model in Web Services not only conformity existing security technologies, such as SOAP (Simple Object Access Protocol), XML (eXtensible Markup Language), PKI (Public Key Infrastructure) and so on, but also using security domain to manage multi-agent. Then the model emphasize on considering cheat between agents and attack actions to web servers, give the punish rule to restrict agent, and introduces PMI (Privilege Management Infrastructure) into security domain to enhance security of itself.Theory analyze shows that the every part of agent-based authentication model in Web Services provide enough security protection to some extent, lighten the workload of authentication process, and improve the integrate security after the application of access authorization rule.