Web Services Security In The Chain Of Commercial Applications

Web Services across the Internet for important information integration technology, which was widely used. Traditional web communications security is built on top of IPsec and SSL,which can't meet the security needs. Based on the security strategy of the message for SOAP message is spending smally, well-targeted properties.First,this paper introduced some concepts and securiry requirement concerned with Web Services. And then introduced the specifications concerned with Web Services message security,such as XML Encryption, XML Signature with WS-Security and so on. According to those specifications, also in view of the security demand of the Chain-like commercial management system using the Web Services,design a Web Service message secure model which can ensure the confidentiality,integrity,nonrepudiation, validation and authorization of SOAP message,can protect the Web Services security.Finally in the application of the model, using Microsoft Releases Web Services Security Development Kit WSE2.0 (Web Services Enh ancements 2.0 for Microsoft.NET) as a Web Service implementation tool, based on the different security needs, using code and based development platform security strategy of the two methods as part of the SOAP message encryption and security signed , and realized the commercial chain management message-level Web Services security. By SOAP message observation, have the desired effect.