摘要
Web服务身份验证策略是Web服务安全的重要组成部分。针对当前Web服务身份验证策略管理、部署中策略交互协调的问题,提出根据客户端安全级别进行Web服务身份验证策略管理,同时提出方法以动态协调当前服务策略。验证策略查询服务作为策略选择的核心部分,为客户端和服务器端提供策略查询以实现动态调用相应的策略。根据这一方法,基于J2EE的相关技术,实现在Axis上的验证策略管理。并且支持动态策略的部署,增加了系统的灵活性和扩展性。
The security identity policy of Web service is an important part of Web service security. This paper makes a point of the disadvantage of correspondence in the management and deployment of Web services security identity policy at present. It advances to apply different policies of Web service according to the secure level of the client and the method to correspond the policy deployment dynamically. As the core of the design, the identity policy query service helps the server and client to query and deploy dynamically the relevant policy. According to the method, the paper realizes the identity policy management on the axis based on J2EE technology. And it helps to support the policy dynamic deployment to improve flexibility and expansibility.
出处
《现代电子技术》
2008年第24期122-126,共5页
Modern Electronics Technique
基金
北京市自然科学基金资助项目(4052010)
