The Design And Implementation Of Security Protection System Based On Web Service

With the development of Internet, many systems developed by different programming languages were raised. Those differences made it difficult to share the resource among different systems. So we must figure out that how to share the resource conveniently. The right choice is Web Service.Web Service technology was used to construct a technology layer which was not relevant with the platform and programming language. Many web services communicated with each other relying on this technology layer. Although Web Service can solve the problem, there was still a security problem. The development of Web Service would be hindered by it. We must find a solution as soon as quickly. To solve the security problem, a security protection system based on Web Service was designed.Firstly, the web service system was consist of clients and manageme--nt server. When the user request service from the Web Service server, the clients would collect the security parameters and send them to the management server. The quality of protection module of management server would calculate the security quality of the system using the security parameters. The result of the calculation was represented by the score. Whether the service request would be allowed depend on the score.Secondly, an evaluation model to evaluate the security quality of the system was constructed. If the score was lower than the small threshold, the service request from user should be cut down. If the score was much higher than the big threshold, the request would be allowed. But if the score was in a middle range, there would be a warning for the user. Then the user must make a choice that whether to allow the service or not. And the system was constructed.In a word, the web service system can protect the communication between clients and management server.