Research on Secure Web Service in Mobile E-Government Platform

Guan Menghui,Wu Jian,Zhan Wentao,Zhang Tao
DOI: https://doi.org/10.16526/j.cnki.11-4762/tp.2009.05.037
2009-01-01
Abstract:In mobile e-government platform, need to consider the security of the web service be used. Only authenticated and authorized users have access to the services provided by Web services. Non-encrypted soap message transmitted in an insecure channel may leak sensitive data. In response to these issues, give out a solution based on the .NET platform. Client first connect to the server, obtain the public key of server, and then negotiate with server about the asymmetric encryption key and symmetric key used for encrypting the SOAP , and obtained the encrypted SessionID from server. Use Soap header to achieve authentication, and use Soap extension to achieve SOAP message optional encryption, ensured the security of web services.
What problem does this paper attempt to address?