支持多密级的SOAP消息安全模型研究与实现

摘要

In order to realize the Web services security in the multilevel security and special cipher environment, based on the modification and expansion of WS-Security specification, SOAP multilevel security polices expand protocol and SOAP multilevel security protocol are proposed, and SOAP security model based on the above protocols is designed and implemented. Relying on the use of multilevel cipher services access technology, this model uses security polices to ensure the SOAP multilevel security. Using the model can validate the integrity and availability of above protocols.%为了实现多密级、特殊密码环境下的Web服务安全性,在对WS-Security规范进行研究的基础上对其进行修改和扩展,提出支持多密级SOAP消息安全标识扩展协议和SOAP消息多密级安全协议,设计并实现一个基于上述协议的SOAP消息安全模型,该模型利用多密级密码服务接入技术,根据安全标识实现支持多密级的SOAP消息安全性要求,从而验证多密级安全协议的完整性、可用性.