一种移动Web服务安全性技术方案

摘要

为解决移动Web服务的安全性问题，文中首先着重研究了适用于Java ME平台的相关加密、和数字签名算法，同时将这些算法应用于移动设备模拟器上以验证其性能，通过分析比较模拟器上的测试数据，从而提出一种适用于移动Web服务的安全性技术方案。最后，通过一个移动机票预订系统来验证技术方案的可行性，该系统能充分考虑端到端安全架构的要求。在安全性上，也基本实现了安全性所要求的目标。%In order to solve the security problem of mobile Web service,firstly studied the encryption,digest and digital signature algo-rithms which applied for the Java ME platform and the performance of these algorithms were tested on mobile device emulator. Through analysis and comparison of test data in emulator,a mobile Web service security technology scheme was proposed. To test the safety and the feasibility of the scheme,designed and constructed a mobile air ticket booking system. The system considered fully the end-to-end se-curity requirement,which basically achieved the safety needs.