【作者】 赵玲；

【导师】 王志坚；

【作者基本信息】 河海大学 ， 计算机应用技术， 2007， 硕士

【摘要】 Web服务作为新一代的平台独立的分布式计算方式，具有适合异构系统集成、易于开发和部署、易于发现和调用等诸多优势，近年来逐渐流行，在很多领域得到了广泛应用，但是Web服务仍然面临多方面的技术挑战，安全就是其中非常重要的一个方面。 作为典型的分布式应用，Web服务的安全性要求包括：数据机密性、完整性、不可否认性、身份认证、访问控制等多个方面，同时其自身的特点——动态联合、多方参与等又带来新的安全挑战。传统的安全通信机制如SSL／TLS、IPsec等，不能满足Web服务有中介参与时端到端的安全要求，Web服务需要消息级别的安全机制来保证端到端的消息安全和提供认证、访问控制。Web服务的动态交互的特点增加了授权决策的难度，服务用户和服务提供者之间没有预先建立的信任关系，传统访问控制机制还存在不足，Web服务需要一种更适合的访问控制方式。 本文分析了现有安全技术保护Web服务安全的不足，基于Web服务的典型应用的安全需求，将Web服务安全规范协同使用设计了基于SOAP扩展的Web服务安全模型，将安全应用于SOAP消息，为Web服务安全提供整体的解决方案，既满足端到端的消息安全要求，又提供访问控制。模型充分考虑Web服务跨组织、动态交互的特点，使用SAML断言传递安全信息以实现信任传递，针对PKI部署复杂以及不同PKI解决方案之间难于互操作的缺点，使用XKMS服务提供PKI功能。模型依赖于一个消息安全处理模型和一个访问控制模型。消息安全处理模型提供可扩展的安全处理层对SOAP进行安全处理和传递身份验证、访问控制所需的安全信息，为Web服务提供透明的安全服务。访问控制模型以XACML通用模型为基础，采用基于属性的访问控制方式，根据SAML断言以及Web服务参数进行授权决策，除可以提供跨域的访问控制，还具有适应动态环境的高度灵活性和可伸缩性。访问控制模型中给出了使用XACML表达的策略结构。 在安全模型的基础上，本文对Axis消息处理框架的特点进行研究，结合供应链管理应用的一个场景，设计了一个基于J2EE平台和Axis SOAP引擎的安全框架。安全框架中包含一系列的安全处理器，和SOAP引擎无缝结合，通过可配置的方式提供安全功能，用来保证Web服务的完整性和机密性，以及提供更高层次的身份验证、访问控制和审计功能。除了安全处理器，本文还根据访问控制模型设计了安全框架中的访问控制机制。 最后，根据安全框架的设计，本文实现了安全处理器及访问控制、审计所需的类，并同WSS4J处理器结合应用在供应链管理应用场景的程序当中。更多还原

【Abstract】 Web Services, the new generation method for platform-independent distributed computing, which are popular and widely used in many fields, have the following benefits including suitable to integrate completely different computing systems, fast and cheap to develop and easy to deploy. However, they still face technology challenges from many aspects, among which secure is the most important one.As a typical distributed application, Web Services have the security requirements including confidentiality, integrity, authentication, non repudiation and authorization. At the same time, theirs own characteristics, such as dynamic interaction and multiple participators bring new challenges to the security issues. In many cases, existing secure transport solutions such as SSL/TLS and IPsec give a good solution for secure transport of SOAP messages, however not always. SOAP messaging is specially designed with intermediaries. So Web Services demand end-to-end message level security. On the other hand, its inherent heterogeneity, dynamic and distribution make authorization control more difficult. Often, there is no trust relationship between user and services providers. Traditional access control model has shortcomings, So Web Services demand a more suitable way for access control.This thesis points out the differences and requirements of Web Services security, and analyses shortcomings of existing security technologies. Based on the research of Web security Specifications, it put forwards a message level security model for the typical Web Services application. The model implements security mechanism in SOAP. It provides both security transport of SOAP messages and an access control security. The model uses XKMS as a replacement of PKI and SAML assertion to exchange authentication as well as authorization information of users. The implement of the model depends on a message processing security model and an access control model. Message processing security model supplies message processing layers to setup a security context and add security information for authentication and authorization. It can provide transparent security services for Web Services. Access control model adopt Attribute-based access control and XACML as policy language. It can provide access control across trust domain based on SAML assertion and takes Web Services parameters into account. Also, the thesis establishes the mapping between XACML and access control model. The access control model is flexible and scalable.Furthermore, on the basis of security model, combined with a simple scenario of Supply Chain Management application, this thesis describes a security framework oriented J2EE platform and Axis soap server. A series of security handlers are designed to ensure the confidentiality and integrity of Web Services and provide mechanisms such as authenticate, access control and audit. Besides, it describes access control mechanism in the framework, which is designed according to the access control model.At last, the realization method of security handlers and components for access control and更多还原