Security analysis of XML web service based on SPKI
Liu Qi-bin · Jisuanji gongcheng yu sheji · 2006
Security problems of web service are introduced,and currentsecurity model and frameof web service areanalyzed.Especially,message security at SOAP layer is described importantly including XML encryption and XML digital signature,and security expansion on SOAP is also expressed.WS-security criterion is presented,and on this basis,SPKI certificate is advised to use as a security token for the authority and identity authentication.Then the structure of SPKI security token and the predominance of being used in the web service are put forward.At last,a security structure is formed,which is composed of XML security,SOAP security,UDDI security and SPKI certificate security.