Abstract:Web service technologies have been widely used in diverse applications. However, there are still many security challenges in reliability, confidentiality and data nonrepudiation, which are prominent especially in some Web service systems that have massive resources in diverse forms. An enhanced mechanism for secure accesses of Web resources is presented and implemented based on the combination of modules of identity authentication, authorized access, and secure transmission to improve the security level of these systems. In the identity authentication, the highly safe and recognized authentication method U-Key is used. For the aspect of authorized access, the integration of an improved Spring Security framework and J2EE architecture is applied to ensure authorized access to Web resources, while the security interceptor of Spring Security is extended and a series of security filters are added to keep web attacks away. Moreover, some improvements of the XML encryption and XML decryption algorithm are made to enhance the security and speed of data transmission, by means of mixing RSA and DES algorithm. The above security mechanism has been applied to an online virtual experiment platform based on Web services named VeePalms. The experimental results show that most security problems with high severity in the system have been solved and medium-low severe problems degreased dramatically.

A SECURE MODEL OF WEB SERVICE BASED ON THE EXPANSIBILITY Of SOAP

Research on the Model of Secure Transmission of SOAP Messages

A Security Model Design in Web Service Environment

AN INTEGRATED WEB SERVICES SECURITY MODEL

Research on Web Services Security Mechanism Based on SOAP Extension

The Simple Object Access Protocol In Web Services Architecture

Soap Security Extension Based on Apache Cxf

Securing SOAP Message Exchange with WS-Security

Security Access Control Scheme for the Web Service Based on Property

Supporting Security in Dynamic Cooperation of Cross-Enterprise Services

Privacy Issues in SOAP Message Exchange Pattern for Social Services.

Web Service Security Specifications and the Realization Based on J2EE

A Web Services Security Policy Description Model

Web Service Security Model for Cross-enterprise Multiparty Collaboration Application

Verifying A Secure Session Protocol for Web Services

A Design of Efficient Role-based Web Services Access Control Model

An enhanced security mechanism for web service based systems

Security Architecture For Web Services

Research on the SOAP Protocol Expansion of Message Broker Middleware

WEB SERVICES SECURITY MECHANISM AND SECURITY TECHNOLOGY

Research of XML Engine Security Model on Web Services