改进的属性证书和WSDL的Web Services授权机制的

Web Services 使得基于XML 技术的分布式计算成为可能，它被看作是将会替代现存
的诸如CORBA、Java RMI 和DCOM 等旧的分布式应用解决方案的一种新兴技术。Web
Services 应用中的最为基本的问题就是Web Services 的安全问题，它是诸多需要被解决的问题中的最为重要的部分，所以保障用户的验证、授权、信息的机密性、完整性和不可否认性就显得十分必要了。论文中，通过引进Web Services 属性证书和对WSDL 进行扩展的方法为Web Services 用户提供了一种行之有效的用户授权方法。
关键词：Web Services；属性证书；访问控制；验证；授权

An Authorization Mechanism for Web Services using an improved Attribute Certificate and
WSDL CAO Peng1,ZHANG Yongping2 (College of Computer Science, China University of Mining and Technology, Xuzhou Jiangsu Province,221008,China) 【Abstract】Web services make the distributed computing based on XML technology possible and are being watched with a new technology to replace the existing distributed computing such as CORBA,Java RMI,and DCOM.One of the issues those should be basically solved to deploy web services is just Web services security.It is necessary to satisfy the security features like user authentication,confidentiality,integrity,non-repudiation,and user authorization.In this paper,we design and implement a system that makes the effective authorization for web service users possible by using an attribute certificate for web services.
【Key words】Web Services,Attribute Certificate,Access Control,Authentication,Authorization