微型机与应用
微型機與應用
미형궤여응용
MICROCOMPUTER & ITS APPLICATIONS
2012年
3期
50-52,55
,共4页
Web服务%信任%身份认证%数字证书
Web服務%信任%身份認證%數字證書
Web복무%신임%신빈인증%수자증서
Web service%trust%identity authentication%digital certificate
在分析XCAML和WS—Security安全规范的基础上,设计出一种基于信任的跨域安全认证模型TB—WSCDSA。该模型解决了跨域服务双方身份认证的问题,并依据各自安全域的访问控制策略和信任计算所需的数据和算法,计算双方的信任度,根据信任度阈值比较结果对双方进行信任评估和授权,并将结果以信任证书的方式发送给服务双方以保证安全通信。
在分析XCAML和WS—Security安全規範的基礎上,設計齣一種基于信任的跨域安全認證模型TB—WSCDSA。該模型解決瞭跨域服務雙方身份認證的問題,併依據各自安全域的訪問控製策略和信任計算所需的數據和算法,計算雙方的信任度,根據信任度閾值比較結果對雙方進行信任評估和授權,併將結果以信任證書的方式髮送給服務雙方以保證安全通信。
재분석XCAML화WS—Security안전규범적기출상,설계출일충기우신임적과역안전인증모형TB—WSCDSA。해모형해결료과역복무쌍방신빈인증적문제,병의거각자안전역적방문공제책략화신임계산소수적수거화산법,계산쌍방적신임도,근거신임도역치비교결과대쌍방진행신임평고화수권,병장결과이신임증서적방식발송급복무쌍방이보증안전통신。
This paper designs a trust-based cross-domain security authentication of Web service(TB-WSCDSA)based on XCAML and WS-Security. This model resolves the problem of cross-domain authentication, and computes trust value of both sides according to algorithm and datum about trust computation and policy from providers and requestors. Finally, TB-WSCDSA decides whether to give both sides authorization based on policy, and gives trust certificate that containes the result of authorization to make sure communication security.