Research And Implementation Of Web-based Services Of Multi-platform Real-time Ticketing System

With the rapid development of the internet, our life has changed a lot, sharing information also becomes more efficient and more convenient. As a model of the new generation internet, Web Services solve the problems about mutual independence and the tightly coupling of distributed-object and middleware technology in the web environment of the traditional network applications. Because of its many advantages, it has been great concerned by a lot of hardware-software platforms and operators. There are many problems to be solved in using Web Service in many fields.Therefore, the security point of Web services is the key problem. Because of Web Service bases on the stand Internet Protocol to exchange information, there is many problems in information lose, information tapped and information tampering. Simple Object Access Protocol(SOAP), which is the core technology of Web Services, is responsible for the security of the Web Service.To cope with the challenges and the threats to Web Services, specialists drafted many specifications to protect it. As one of them, Web Services Security Specification adds a framework to the existing specifications (encryption XML, signature XML and other specifications) to embed these mechanisms into a SOAP message. But WS-Security Specification can't guarantee the security and provide a complete security solution for Web Services.Based on the WS-Security Specification and the implement of Multi-platform Real-time Ticketing System, this thesis elaborates the important of Web Services. The main work of the thesis is as follows:1. Analyzing the technical foundation of web services, researching on the threats and the related technology of web services.2. Using multi-storey structure in the Multi-platform Real-time Ticketing System, abstracting the various functions of the system into modules, separating the business and logic of the software, enhancing the reusability of the code.3. Combined with the designing of web services,the thesis described the .NET web services environment to achieve security approach in detail, and gave some codes to realize the SOAP message signatures and encryption.4. Using X.509 certificates for signatures and encryption. According to the needs of different security level, we used different combination of encryption and signature methods in the transmission of data, and achieved a balance between the security and performance.