Model And Application Of E-Government Oriented SOAP Message Security

With the application of Internet technology in various fields, the security of WEB services is a hot issue of information exchange. Currently, the WEB service is achieved through XML/SOAP protocol and internet protocol to complete the information interaction. To ensure the security of WEB services, the main problem is the security of XML/SOAP message in transmission process.The security of transmit SOAP messages is confidentiality, integrity, non-repudiation, authentication and authorization of the message in the interactive process of services. The purpose of this paper is how to secure use SOAP message in WEB service, full use of encryption, signature and other means to ensure that the security of SOAP messages in transit process, to avoid theft by a third party, monitoring and tampering and ensure the information's end to end transmission security and effective.The specific content of the paper is establish the model of SOAP message security, combined of SOAP message transmission mechanism and five basic requirements of WEB services, the model is mainly involved the confidentiality of the SOAP message through XML encryption technology merge traditional encryption technology, the signature operations of SOAP message combined the XML Signature and XML-Encryption raised by W3C, to ensure the integrity of SOAP messages in transmission and add a timestamp protocol to the SOAP messaging, and further,to ensure the Non-repudiation of SOAP messages. Second, this model is applied in electronic tender bidding system of the government. The model roles in the bidding system is implemented the security measures for the bidding process information,that ensure the confidentiality, integrity and non-repudiation, not only vertify the security and stability of the model, but also, it provide a high quality, safe and fair competition platform for the bidding.