【作者】 李伟；

【导师】 蔡家楣； 陈铁明；

【作者基本信息】 浙江工业大学 ， 计算机系统结构， 2009， 硕士

【摘要】 Web Service提供了一种松散耦合的软件开发模式,通过统一的操作接口描述和标准的XML消息传递技术,集成了网络分布式异构应用。随着Web Service应用的推广,Web服务的提供和服务调用是重要核心。目前的Web Service框架提供了较完善的服务实现方法,可保障Web服务机制的运行安全。随着密码安全技术的发展,用户也相应提出了更高效的安全服务需求,研究新型高效的密码安全应用模型已成为一个热点。同时,研究如何将新型的安全应用模型设计成Web Service服务,为各类客户应用程序提供统一、安全、便捷的安全服务,对构筑Web Service安全应用开发环境有重要意义。目前,以数字证书为核心的公钥基础设施PKI系统是应用最广的网络安全解决方案。随着Web Service的应用发展,以及基于XML的密钥管理规范XKMS的实施,基于Web Service的PKI安全服务架构方面已出现较多研究成果。基于Web Service的PKI服务模式,虽然整合了PKI安全实现和密钥管理等服务,缓解了客户应用对PKI的部署难题,但系统运行仍然无法避免证书管理、撤销、维护、发布、更新等操作的复杂性。基于身份的加密体制IBE(Identity-based Encryption),以用户身份信息作为公钥,不涉及数字证书的管理和操作,是一种基于密钥集中管理的新型公钥加密体制。因此,研究基于Web Service的IBE安全服务有重要的研究价值和现实意义。本文首先介绍Web服务基础理论、安全框架及相关技术,研究了基于Web Service的PKI安全服务的研究现状;接着在分析比较IBE和PKI的基础上,提出了一套基于Web Service的IBE安全服务体系;重点设计了无证书的密钥管理服务及相关的安全应用服务,并研究开发了一个IBE安全服务的原型系统IBEWS;阐述了IBEWS系统工作流程,实现了性能测试并与PKI环境下的XKMS系统作比较,说明了IBEWS的性能优势;最后,基于IBEWS服务系统,设计并开发了日志加密和安全认证两个应用实例,阐述了IBEWS在Web Service环境下的作用和意义。更多还原

【Abstract】 Web Service provides a loosely coupled model of software development, and integrates the heterogeneous applications of distributed network by the unified description for the operation interface and the standard of XML messaging. With the development of Web Service application, the security issue of providing and transferring service receives much attentions. The current Web Service model provides a more comprehensive security framework, and guarantees the Web service mechanism operates safely. However, with the development of cryptography techniques, studying a new and efficient application model of crytography security has become a hot spot. At the same time, how to design the new type of security application based on Web Service model, providing all kinds of unified, safe, and convenient security service for clients, It’s important for building a security application development environment of Web Service.At present, digital certificates is the core of Public Key Infrastructure(PKI). PKI is the most widely used as network security solution. With the development of the Web Service application, as well as the implementation of the XML-based Key Management Specification XKMS, there is much research of PKI-based Web Service security service architecture. The PKI-based service model integrates much service, such as PKI security implementation and key management, and eases the deployment problem of custom applications on the PKI, but running the system still can not avoid the complexity of operations, such as certificate management, revocation, maintenance, publishing and updating. IBE (Identity-based Encryption) takes the user’s identity information as a public key, and does not involve the management and operation of certificate. IBE is the new public key encryption system which the key is centrally managed. Therefore, there is important research value and practical significance to study the IBE security services based on Web Service. This article first introduces the basic theory and security framework of Web service, and the related technologies, and then researches the present situation of the PKI security service based on Web Service.Then, On the basis of analysis and comparison of IBE and PKI, it proposes a set of IBE Security Service System based on Web Service; it focuses on the design of the non-certified key management service and the related security applications. It designs and implements the prototype system of IBE security service (IBEWS); it describes the IBEWS system’s workflow achieving a performance test and comparing with the XKMS system based on PKI, which shows the advantage of IBEWS performance. Finally, the log encryption and security authentication of SAML, two applications based on IBEWS are given at the end of this paper, to state the availability and practical significance of IBEWS offering Security Service in the Web Service environment.更多还原