摘要
针对Web服务领域日益严重的安全问题 ,分析了消息传输安全性的需求 ,分别讨论了几种常见的构架在SSL安全协议之上 ,或工作在非SSL环境下的安全保障措施 .提出了一种利用HTTP头部标记、二进制安全令牌和数字签名等技术 ,保障Web服务综合安全的模型 .
Aimed at the increasingly severe security of web service,the security requirements of the message transport were analyzed. Several pieces of security guarantee were discussed base on secure protocol SSL or not. A comprehensive web service security mode was promoted which would use the technologies such as the extended head tab field of HTTP,binary security token and digital signature and so on.
出处
《华中科技大学学报(自然科学版)》
EI
CAS
CSCD
北大核心
2004年第4期50-52,共3页
Journal of Huazhong University of Science and Technology(Natural Science Edition)