Abstract:Web service technologies have been widely used in diverse applications. However, there are still many security challenges in reliability, confidentiality and data nonrepudiation, which are prominent especially in some Web service systems that have massive resources in diverse forms. An enhanced mechanism for secure accesses of Web resources is presented and implemented based on the combination of modules of identity authentication, authorized access, and secure transmission to improve the security level of these systems. In the identity authentication, the highly safe and recognized authentication method U-Key is used. For the aspect of authorized access, the integration of an improved Spring Security framework and J2EE architecture is applied to ensure authorized access to Web resources, while the security interceptor of Spring Security is extended and a series of security filters are added to keep web attacks away. Moreover, some improvements of the XML encryption and XML decryption algorithm are made to enhance the security and speed of data transmission, by means of mixing RSA and DES algorithm. The above security mechanism has been applied to an online virtual experiment platform based on Web services named VeePalms. The experimental results show that most security problems with high severity in the system have been solved and medium-low severe problems degreased dramatically.

Construction of security architecture of web services based EAI

A NEW SAFE FRAMEWORK OF ENTERPRISE APPLICATION INTEGRATION BASED ON WEB SERVICES

Research on Information Security Model for Services Oriented Enterprise Integration Architecture

Research On Construction Of Eai-Oriented Web Service Architecture

Web Service Based Enterprise Application Integration

An enhanced security mechanism for web service based systems

Solutions for Open Enterprise Application Integration System

A policy-based architecture for web services authentication

Study of the Framework of Web Service-Based Application System

An Authentication and Authorization Solution Supporting SOA-based Distributed Systems

Research on Security Architecture Based on Web Service System

Integrative Security Management for Web-Based Enterprise Applications

The Research And Application Of Web Services In Enterprise Application Integration

A Security Service For Enhancing Esb Based Execution Platform

Research on Enterprise Application Integration Based on Web Services

A Web Service Based Application Integration Solution

E-Business Integration Architecture Based on Web Service

Research of Data Security of Distributed System-based Web Services

Dynamic E-commerce Security Based on the Web Services.

Application of EIP-based Single Sign-on Technology in EAI

Study of Security and Application about Web Services