Message-level security model for web services and its security evaluation
Yongquan Zhou · Jisuanji gongcheng yu sheji · 2006
There are two security mechanisms for web services: Transport-level security is tightly coupled to the underlying platform,and it only provide point-to-point secure guarantee,while message-level security can provide end-to-end secure guarantee in a heterogen-eous environment.The specifications concerned with web services message-level security is put foruard,such as WS-security,SAML and XKMS.According to these specifications,a security model of SOAP message isdesigned which ensure theconfidentiality,integrity,nonrepudiation,authentication and authorization of SOAP message.