【摘要】 本文提出了一种Web服务访问控制沙盒模型。该模型不仅可以利用传统的身份验证还可以通过扩展SOAP消息,加入角色信息,利用角色验证来保证Web服务的访问安全。此外,该模型还提出了一种安全管理器的机制,该机制使得Web服务创建者和维护者可以更底层更灵活地保障Web服务访问安全。更多还原

【Abstract】 This paper proposed an access control sandbox model for Web Services. Rather than basing access on the traditional validation of a client’s identity, the model also takes the roles validation into account via extending the SOAP message by adding roles information to it .Further more, the model also proposed a kind of mechanism of Security Manager. This kind of mechanism makes the Web Services designer and maintainer can maintain the security of the Web Services access through a more low level and more flexible way.更多还原