Research And Design Of Web Services Security Agent

With the rapid development of the service-oriented architectures,Web Service has been widely used. The security issues are increasingly concerned about. The paper introduces the concepts, the realization models, and the key technologies of Web Service, and researches the related technologies and standards of Web Service security. Based on the current studying situation of Web Service security, the article puts forward a Web Service security model based on proxy. On the basis of studying, the thesis focuses on the design of system and structure about Web Service security agent. Firstly, the paper analyzes the business process of the Web Service security model based on agent by the one-way Web Service calling, and poses the logical structure framework of security agent. Next, the article brings the detailed design of the programme about the client-service security agent. In the design of Web Service security agent, considering the problems of processing performance and the common application of the software, the thesis adopts the SAX, which is the interface of simple application programme, to parse SOAP message, to encrypt and decrypt, to sign and validate SOAP message in the light of WS-Security. Also, it establishes and implements the security strategies according to the WS-SecurityPolicy. Finally, the thesis initially realizes the handling function of information security based on the Web Service security agent, and evaluates its feasibility and validity by the experiments.