Study on Cross-domain Authentication Mechanisms for Web Services
Shen Hai-bo · Training and Research · 2005
Web service is a new distributed computing mode, and is the framework of the next generation e-commerce. The development of Web Services poses a lot of security challenges, and a key challenge amongst them is the design of secure and effective cross-domain identity authentication mechanisms. Security Assertion Markup Language (SAML) brings the hope of addressing successfully this issue. This paper analyzes the existing authentication mechanisms for web services, and discusses some kinds of standards and protocols relating to web services authentication. Especially, SAML-based cross-domain authentication mechanism and related security problems are analyzed and discussed.