The Design And Realization Of SOAP Security Extension Method Based On .NET Platform

Web service is a measured intergrated application which is Loosely Coupled, cross-platform language and different client to use its service. It is a difference in the standard form of application integration, it allows different client to use it to provide services.Web service has been widely receives as a distributed process used in many platform and system.With Web service in the areas of e-commerce development, the security of their communications is becoming increasingly important.SOAP, the basis of Web service transport protocol, plays an important role in the implementation of Web service.Inspried by SOAP design thought, we tried to utilize available technologies to design a SOAP message transfer frame and then implement key technology in it, in order to optimize Web service.This article mostly focuses on research and application of SOAP.First analyzed SOAP deeply, include SOAP message process framework, expansibility, protocol binding.Then introduced SOAP Extension, The SOAP Extension is a invoking mechanism of he Web service method which can manipulate them brfor transferring SOAP request and response.The developer can write a code which can be executed when the SOAP message is after serialized and before deserialized.This article extended SOAP to Embedded XML Signature and XML encryption into SOAP, making use of the expansibility of SOAP, used DES arithmetic to extended SOAP in security aspect; and demonstrate the extends of SOAP in confidentiality, integrality, indentification, in the end, designed and implied a stock system prototype which is based on Web service and client of it is a windows form application and applied SOAP security in fund transfer module of this prototype, implied the application of SOAP security.