A security middleware in web services
Luo Dong-jun · Ha'erbin gongye daxue xuebao · 2009
In allusion to the security problem in process of extensive use of web service,this paper proposes a security middleware in web services(SMWS),designs its architecture,and discusses its concrete implementation technology from aspects of user management and identity authentication.The middleware manages user information by PGP model,and processes authentication each other by means of a triple-peer security protocol based on the combination of public-key management and user management.The analyses and experiment show that the middleware is simple,secure and effective to solve the security problem of web services such as authentication,permission,denying resistance,playback resistance.And it is capable to easily implement Single Sign-On.