Web Services Security In The Campus Card System

This paper talks about knowledge of message-level web services security according to security requirement of smart card running on campus. the paper works over some elementary theory and practical method about web services security, also talks about many technologies implementing web services security, and then introduces three web service security models: transport level security, application level security and message level security. By comparing strengths and weaknesses with each other, and considering practical security requirement and characteristics of smart card software system on campus, the paper chooses message-level web services security and applies it to smart card system.This paper details how to implement authentication, authorization, digital signature, encryption and secure conversation of message-level web services and how to use security token such as UsernameToken, security context token X. 509 certificate. The paper selects WSE2. 0 (Web Services Enhancements 2. 0 for Microsoft . NET ) as the development tool to implement web services security, which allows you to build secure message-level web services using its security support.The system adopts different web services security strategies and technologies according to functions and features of web services in system , and describes two typical web services secure application samples in system : implementing secure conversation of web services with WSE, encrypting or signing SOAP message which is specified . In these ways , the author properly solves the web services security problems lies in system , and accomplishes the design and implementation of collect and watch modules and data transfer modules in system with secure message delivery. The author implements these software modules using Microsoft .NET platform , which offers series of very important andpowerful programming technologies such as XML Web Service and . NET Remoting.