Research On Security Mechanism Of SOAP Message Exchange

With the rapid development of information technology and network technology,information exchange increasingly on the Internet. Nowdays, SOA (ServiceOrientedArchitecture, service-oriented architecture) and Web services technology has beenwidely used in enterprise-class business development. With the continuous developmentof technology, communication problems between the security services has become a keyissue restricting SOA and Web services technology to continue to develop and promote anurgent problem. Between the main service through SOAP (Simple Object Access Protocol,Simple Object Access Protocol) message interaction SOAP message exchange existingsecurity mechanism is based on the transport layer. However, transport layer securitymechanisms due to technical limitations exist shortcomings, which need to build aservice-oriented SOAP message exchange message layer security mechanisms.The message layer security mechanism for SOAP message exchange service isstudied. First, the author introduces the SOA, Web Services and SOAP relatedtechnologies, and on this basis to study the SOAP messaging security mechanisms, leadsto the establishment of secure service-oriented framework for message layer securitymechanisms and transport layer security mechanism based on a combination of messagelayer and to make the overall design; then based on Web services message layer securityarchitecture based on WS*standards currently study proposed using the SOAP methodSOAP message header add header extension information to ensure safe and efficienttransport SOAP messages are mechanisms; then implements this framework and moduleson transport safety testing SOAP message SOAP message recovery, and explains theirworkflow; Finally, a concrete example of the extended validation and analysis of thefeasibility and SOAP message security.