Research Of Message Security In Services Oriented Architecture

After several years of development the software industry gradually formed a philosophy that service is the foundation of design. With the development of information technology, enterprises informatization are advancing step by step. The software of enterprise in different platform and different function are integrated to set up a Services Oriented Architecture (SOA), which purpose is to enhance the enterprise software reusability and maintainability. SOA is becoming the future development trend of enterprise informatization and how to ensure the security of SOA is a critical issue in building enterprise software systems.The paper first introduces the connotation of the SOA technology, characteristics and realization method, give analysis focused on how to use of Web Services to achieve SOA, do a systematic study on web services protocol stack, discuss information on UDDI, WSDL, SOAP and other technologies. Then based on the latest research in the security of SOA, deeply discusses SOAP messages transmission security in SOA environment, introduces the currently message security model of SOA— —WS-Security, and display the XML rewrite attack in the protocol, propose a new strategy of SOAP message transmission security. This strategy use SMSIA (SOAP Message Structure Information Account) as a tool to check the integrity and credible information of SOAP message. Finally, design and achieve the security strategy by Java, and do some tests in a simulate SOA environment which name is travel information service platform. The results of test show that the policy strengthen the SOAP message transmission security in SOA environment, and improve the system performance, so it can be widely applied in enterprise software environment which are based on SOA.