Data Synchornization Based On Web Service

The Enterprise information system is an organic whole,but each subsystem is highly independent,and the data and business can't be shared because of the restriction of the software development technology and the zero to entire informationization process.The Enterprise portal integrates every application system,data resourse,and Internet resourse,and organize different functions of each sub system,thus provides a unified entry of the information service.Web Service becomes the firstly-considered solution to integrate the portal with each sub-systems,for it has characteristics of platform independency and language independency.The System integration must involve with the data synchronization among systems.for the important and sensitive data,we must make sure it's safely transported in the internet.for the interoperation,the consistency is necessary.Base on study of the Web Service and SOAP protocol,the thesis implement the inter-system's synchronization of to-do event and basis data by using the extensibility of the SOAP message,XML security techniques,and Axis's expandable handler mechanism.The specific job are follows:(1) Analyze and research related technologies(WSDL,SOAP,Web Service's architechture,Web Service's key technologies,etc),the SOAP trans门户sion mechanism and the threats to Web Service are probed into,and analyze the security goal of web service.(2) Give a requirement analysis and preliminary implemention of the synchronization of the basis data and to-do,and consider the batch data sysnchronization of the basis data and the inter-system consistency when synchronizing to-do event. (3) Based on the research and analysis of the relevant theories, design and implement a web service security model base on the extensibility of the SOAP message.and The model is a combination of XML signature,XML Encryption, authentication and authorization,access-control based on RBAC.Data integrity could be guaranteed by XML signature,The integrity of the message could be guaranteed by XML Encryption,access control can guarantee the valid user access the guaranteed resourses。(4)Based on the security model in(3),implements the XML signature,XML encryption authentication and authorization by utilizing the expandable handler mechanism of Axis,also resist the repeat attack to guarantee the secutiry of the data transmission.(5) Using soapUI utility to test the function of the data synchronization,including basis data and to-do event.Finally analyze and summarize the result of the security tests.