Soap Message In The Application Layer Security Mechanisms Study

Modern enterprise electronic office system is gradually transformed into a framework based on the SOA model. SOA Web Services as one of the basic technical framework is gradually improving, and was more and more enterprises are widely used. At the same time, the SOAP message security issues have emerged in the Web Services communication process.Currently, the solution of this problem, most focus on research ways to protect the client's SOAP message security. As for how to protect the message security which return from Web Service, in particular how to protect the message security send from the client and Web Service at the same time, most remain in the theoretical study, but lack of adequate, integrity and actual code.Through analysis the SOAP message in the application layer security issues, and on that basis, construct a more effective solution to protect the security of SOAP message and given a key code examples and Web.config configuration code. Once to use of this solution, the SOAP message send from client or Web Service can be made safety, and SOAP message structure will be built to meet the XML-Security and WS-Security standard requirements.The solution was taken meticulous tests by using Microsoft SOAP Toolkit 3.0 tools. At the same time, the solution was applied to a system which function is retrieval workers information, appropriate transformation of the system, carried out a series of performance tests. Data analysis of test results showed that this solution have certain practical value. Especially when the SOAP message smaller than 1 MB, this solution provide a good safety performance and high efficiency.