SOAP消息交互安全机制的研究

发布时间：2018-02-05 20:33

本文关键词： 面向服务的构架简单对象访问协议 Web服务 SOAP消息扩展消息层安全机制　出处：《华中科技大学》2014年硕士论文　论文类型：学位论文

【摘要】：随着当今信息技术和网络技术飞速的发展，网络中信息交互日益频繁。当前，面向服务的构架和Web服务技术在日趋完善，并因此受到了广泛的应用。技术不断推广与发展使得各个服务间交互的安全问题被摆上了台面，现在它成为了面向服务的构架及Web服务技术中最受到关注的一个瓶颈性的问题。服务之间主要通过简单对象访问协议来进行消息的交互，，现有的SOAP(SimpleObject Access Protocol，简单对象访问协议)消息交互安全机制主要由传输层安全来保证。但是传输层安全机制却存在很多的不足，这就对消息层安全机制的建立提出了要求。主要研究方向是面向服务的消息层SOAP消息通信交互的安全机制。介绍了SOA （Service Oriented Architecture，面向服务的构架）、Web服务和SOAP的相关技术，并在此基础上对SOA架构的结构、Web服务以及SOAP的相关技术进行了研究；对Web服务传输层消息的安全通信机制以及遵从WS安全标准规范的现有Web服务安全结构进行分析研究，设计了传输层和消息层结合的Web安全框架。提出了通过在SOAP消息内部增加的安全节点的来解决针对SOAP消息的篡改和协商SOAP消息加密安全等级方法，设计并实现了一个采用这两种方法设计了消息层Web服务安全框架，该框架包含了SOAP消息恢复功能。在实验部分验证了能够通过新增SOAPStructure安全节点方法保证SOAP消息完整性。
[Abstract]:With the rapid development of information technology and network technology, information interaction in the network is becoming more and more frequent. At present, the service-oriented architecture and Web services technology are becoming more and more perfect. Because of this, it has been widely used. The continuous promotion and development of technology make the security problem of the interaction between various services put on the table. Now it has become a bottleneck in service-oriented architecture and Web services technology. Messages are interacted between services mainly through simple object access protocols, existing SOAP(SimpleObject Access Protocol. Simple object access Protocol) the security mechanism of message interaction is mainly guaranteed by the security of the transport layer, but there are many shortcomings in the security mechanism of the transport layer, which requires the establishment of the security mechanism of the message layer. The main research direction is the security mechanism of SOAP message communication interaction in the service oriented message layer, and introduces the SOA service Oriented Architecture. On the basis of this, the structure of SOA and the related technology of SOAP are studied. The secure communication mechanism of Web service transport layer message and the existing Web service security structure complying with WS security standard specification are analyzed and studied. This paper designs a Web security framework which combines transport layer and message layer, and proposes to solve the tampering of SOAP messages and the negotiation of encryption security of SOAP messages by adding security nodes inside SOAP messages. Hierarchical approach. This paper designs and implements a message-level Web service security framework based on these two methods. The framework includes the function of SOAP message recovery. In the experiment part, it is verified that the integrity of SOAP messages can be guaranteed by adding new SOAPStructure secure nodes.
【学位授予单位】：华中科技大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP309;TP393.09

【相似文献】