DISTRIBUTED WEB SERVICE SECURITY MODEL WITH UDDI FUNCTION EXTENSION

Zhang Mi,Ma Ziji,Zhu Donglai,Zang Binyu

DOI: https://doi.org/10.3969/j.issn.1000-386X.2007.12.075

2007-01-01

Abstract:Current Web Service cannot meet the demand of end-to-end security in a dynamic environment.Agent technology is used to extend UDDI function to handle the security transaction.A novel distributed security model is constructed.

What problem does this paper attempt to address?

Research on security extensions based on Java 2 security architecture

TIAN Yu-hong,WANG Ze-bing,FENG Yan

DOI: https://doi.org/10.3969/j.issn.1000-7024.2006.24.029

2006-01-01

Abstract:The Java virtual machine(JVM)is used more frequently as the basic engine behind dynamic web services.With the proliferation of network attacks on these network resources,much work are done to provide security for the network environment.Little effort has been placed on securing a Java web server where the attacker has a valid login to the host machine.After describing the vulnerabilities in Java's security mechanisms,an extended security system based on Java 2 security architecture is introduced.It also explains the runtime status of system.The increased assurance of correct system operation and the integrity of Java application server are provided.
Supporting Security in Dynamic Cooperation of Cross-Enterprise Services

Jingfan Tang,Zhijun He

DOI: https://doi.org/10.1109/cscwd.2006.253075

2006-01-01

Abstract:This paper presents a novel model to support security in dynamic cooperation of cross-enterprise services. With the extended WSDL description and through the replication technique, the service replica can be dynamically deployed and executed on the optimum cross-enterprise server, which is selected from the registered servers in the enhanced UDDI center according to the server evaluation function. In order to ensure the safety and dynamically sharing of the cross-enterprise resources among the Web services, a security mechanism of trusted right delegation is introduced
Construction of security architecture of web services based EAI

Di Wu,Yabo Dong,Jian Lin,Miaoliang Zhu

DOI: https://doi.org/10.1007/11563952_52

2005-01-01

Abstract:The fast development of E-Commerce and information technology brings much higher requirements for enterprise informationization. Because of the differences in platforms, development languages and standards etc, enterprise application integration (EAI) has become the important form of enterprise informationization to support complex business processes. Web services have emerged as the next generation of integration technology which provides the power to support interoperability. However EAI doesn’t just present new interoperability challenges; it also presents serious privacy and security challenges. This paper presents security architecture of Web Services based EAI which uses distributed Single Sign On authentication and distributed Role-based Access Control authorization. The basic concept and prototype system of the security architecture are described in detail.
A Security Model Design in Web Service Environment

Zhang Mi,Cheng Zunping,Ma Ziji,Zang Binyu

DOI: https://doi.org/10.1109/CIT.2005.47

2005-01-01

Abstract:With the emerging applications based on Web Service, end-to-end security becomes more and more important. SSL and current XML security schemas cannot reach the demand of it. This paper proposes a novel security model -- ESM, which integrates some popular XML security schemas and constructs a layered model based on SOAP message transport mechanism. It's aiming at the end-to-end security issues in Web Service environment. Compared with other security models known to us, this model is more comprehensive and flexible.
Secure digital watermark scheme based on Web Services

胡伟清,童春杰,陈德人,李子臣,寇卫东

DOI: https://doi.org/10.3785/j.issn.1008-973X.2004.11.011

2004-01-01

Abstract:A common digital watermark system does not provide watermark inserting and detecting services on Internet. In order to make wider application of digital watermark, a new scheme to make traditional watermark available as Web Services was presented. It was based upon Web Services for inserting watermark and detecting watermark and used simple object access protocol (SOAP) to exchange messages between service requester and service provider. Based on digital certificate and extensible markup language (XML) encryption and digital signature technology, a secure interaction between the requester and the provider was provided. This scheme reduces cost and protects digital products effectively on open networks.
AN INTEGRATED WEB SERVICES SECURITY MODEL

Chen Guilin,Zhao Shenghui,Chen Haibao,Ji Chengchao

DOI: https://doi.org/10.3969/j.issn.1000-386X.2009.02.025

2009-01-01

Abstract:Current Web services security technologies are relatively independent.However,it needs an overall security design for the whole application integrating solution.An integrated Web services security model is proposed,where the formal definition of the model and the key implementation techniques are given.The model achieves following security targets:uniform identity authentication based on certification,role-based access control and secure SOAP message transmission,which makes the model have characteristics of openness and dynamic adaptation.A prototype system is developed based on this model,the running results show that it can achieve above three secure targets,and makes the whole system more secure than single security technology.
On Web-Service-Based Dynamic Virtual Enterprise

陈冰,魏生民,王润孝

DOI: https://doi.org/10.3321/j.issn:1003-8728.2003.04.004

2003-01-01

Abstract:Shorter Lifetime, loose coupling, dynamicall y changing partners, better scalability become new trends of Virtual enterprise. I n this kind of environment it is necessary to study methods for implementing dyn amic virtual enterprise which has these new characters. In this paper we present our vision of the Web-service-based dynamic virtual enterprise: a highly inte roperable, dynamical, service-oriented enterprise infrastructure for small busi nesses and large corporations. In this enterprise infrastructure, UDDI(Universal Description Discovery Integration) become the enterprise register center. Any s ervice provider can enable its business to be programmatically accessible on the Internet (it becomes a Web service) and registers their service to UDDI. Distri buted, heterogeneous partner can search dynamically accessible service by UDDI a nd interoperate with other partner using standard data exchange format XML(eXten sible Markup Language) and message interchange protocol SOAP(Simple Object Acces s Protocol ). We studied the life cycle of Web-service-based dynamic virtual e nterprise and point out three key technologies for its implementation: (1) dynam ic search service provider by UDDI; (2) Web service-based workflow; (3) Virtual enterprise portal.
A SECURE MODEL OF WEB SERVICE BASED ON THE EXPANSIBILITY Of SOAP

Zeng Xiu,Peng Hong,Zuo Guo-wei

DOI: https://doi.org/10.3969/j.issn.1009-8526.2008.02.013

2008-01-01

Abstract:This article puts forward a secure model of Web Service based on the expansibility of SOAP with secure specification of Web Services.The model extends authorized information in addition to generally extending the security of SOAP.It has four features: safety of end to end,safety of saving information,independence of application,independence of Deliver.
Research of Data Security of Distributed System-based Web Services

CUI Jian-Ming,FAN Li-Lin,WANG Xiao-Dong

DOI: https://doi.org/10.3969/j.issn.1672-6871.2006.03.012

2007-01-01

Abstract:Security and reliability of Web Services-based distributed system is introduced.Main technologies of current Web Services data transfer are analyzed and their weak points discussed.On this base,a detailed solution,which is a combination of encryption and digital signature to communicate with customer-end with canonical XML,is put forward.The transfer security of share data and the reliable trust relation between Web Services Server and customer is enhanced by this solution.
ADDI: an agent-based extension to UDDI for supply chain management

Mi Zhang,Zunping Cheng,Yongzun Zhao,Joshua Z. Huang,Yinsheng Li,Binyu Zang

DOI: https://doi.org/10.1109/CSCWD.2005.194206

2005-01-01

Abstract:This paper proposes a new mediate module ADDI to organize the UDDI nodes published by the different corporations on supply chain and establish a UDDI dynamic ranking model. We suggest a novel model for supply chain conduct classification, and define the supply chain entity conduct types as a standard for Web service classification and UDDI ranking. In this model, Web service-oriented technologies and protocols are deployed for modeling, managing and executing business-oriented functionalities and environments. We focus on the efficient integration of supply chain as key points to harmonize these technologies. Agent-orientation concepts and technologies are applied for SCM construction and interaction patterns.
Verification of Web Services Using an Enhanced Uddi Server

WT Tsai,R Paul,Z Cao,L Yu,A Saimi,B Xiao

DOI: https://doi.org/10.1109/words.2003.1218075

2003-01-01

Abstract:The UDDI (Universal Description Discovery and Integration) provides classification to find the distributed Web services (WS) by keyword matching. The UDDI version 3 allows searching WS using digital signatures. However, it still needs systematic verification to ensure WS quality in a timely fashion. This paper proposes adding verification mechanism to the UDDI servers including check-in and checkout of WS. The key idea is that test scripts should be attached to WS, and both WS providers and clients use these test scripts. Before accepting a new WS into the service directory. The associated test scripts must test the new WS, and they will be accepted only if the test was successful. Before using a specific WS, a client can use the appropriate test scripts to test the WS and it will be used only if the test was successful. While the code for WS may not be available, but the associated test scripts test script specification techniques and distributed test execution techniques to perform testing with a UDDI server.
Web Service Security Model for Cross-enterprise Multiparty Collaboration Application

RUAN Tong,JIN Zhi-chao

DOI: https://doi.org/10.3969/j.issn.1000-3428.2013.02.011

2013-01-01

Abstract:Web service security tools nowadays provide security configuration functionality at single Web services level,neglecting security requirement from business process layer.A Web service security framework towards multi-party collaboration application is proposed in this paper,which incorporates the enterprise business process management with security processes including security modeling,deployment and monitoring.Corresponding modeling tools,converting tools and monitoring tools based on Secure-WSCDL are constructed,synchronizing business model and security model throughout the entire software engineering lifecycle in SOA architecture.It verifies the effectiveness of the model and the tools by the simplified international trade import and export process instance.
Extended UDDI Architecture Based on Economic Model

崔蓝艺,赵曦滨,雍建平,顾明

2004-01-01

Journal of Computer Applications

Abstract:A new UDDI(Universal Description, Discovery and Integration) architecture based on economic model was proposed, which extended traditional UDDI center of Web Services architecture. Furthermore, the deal strategies were designed and implemented. In summing up it was stated that the extended UDDI architecture provided friendly commerce communication platform between Web Services consumers and Web Services providers, and promoted efficient arrangement, management and deployment of service resources in network.
Security In A Mobile Agent Based Ddm Infrastructure

Xining Li

DOI: https://doi.org/10.1007/978-3-540-72839-9_10

2007-01-01

Abstract:Mobile agent technology offers a new approach to mining information from data sources distributed over the Internet. However, the potential benefits of mobile agents must be weighted against the real security threats. An agent based Distributed Data Mining (DDM) system must cope with exposed data services and insecure communication channels in the Internet to protect the privacy, integrity and availability of agents and distributed resources. In this paper, we present the design of a mobile agent infrastructure for DDM applications and discuss the implementation of security mechanism that has been effectively integrated with the mobile agent virtual machine.
An enhanced security mechanism for web service based systems

Wenbin Jiang,Hao Dong,Hai Jin,Hui Xu,Xiaofei Liao

DOI: https://doi.org/10.1007/978-3-642-37015-1_23

2013-01-01

Abstract:Web service technologies have been widely used in diverse applications. However, there are still many security challenges in reliability, confidentiality and data nonrepudiation, which are prominent especially in some Web service systems that have massive resources in diverse forms. An enhanced mechanism for secure accesses of Web resources is presented and implemented based on the combination of modules of identity authentication, authorized access, and secure transmission to improve the security level of these systems. In the identity authentication, the highly safe and recognized authentication method U-Key is used. For the aspect of authorized access, the integration of an improved Spring Security framework and J2EE architecture is applied to ensure authorized access to Web resources, while the security interceptor of Spring Security is extended and a series of security filters are added to keep web attacks away. Moreover, some improvements of the XML encryption and XML decryption algorithm are made to enhance the security and speed of data transmission, by means of mixing RSA and DES algorithm. The above security mechanism has been applied to an online virtual experiment platform based on Web services named VeePalms. The experimental results show that most security problems with high severity in the system have been solved and medium-low severe problems degreased dramatically.
Distributed System Integration-Oriented Web Service Management Method

WU Jing,PENG Qi-rui,LI Qing,LIU Yong-qing

DOI: https://doi.org/10.19304/j.cnki.issn1000-7180.2010.08.002

2010-01-01

Abstract:To overcome the universal challenge of distributed application integration for Chinese enterprise groups and solve the problem of shared management and cross-domain access control of the service resources under SOA, a whole web service management method is presented. By designing an infrastructure based on Service-Access-Agent and a global authentication and authorization mechanism, the security of the integrated system is ensured with low cost. Meanwhile, by using a registration service based on global unique ID and dynamic invocation mechanism, the agility and loose coupling of SOA are improved. The good adaptability and practical value of the method has been shown by engineering application in a typical group enterprise.
Enhance Uddi And Design Peer-To-Peer Network For Uddi To Realize Decentralized Web Service Discovery

Deke Guo,Honghui Chen,Xueshan Luo,Wei-ming Zhang

2005-01-01

Abstract:Web Services has emerged as a dominant paradigm for constructing and composing distributed business applications and enabling enterprise-wide interoperability. A critical factor to the overall utility of web services is a scalable, flexible and robust discover mechanism. This paper improves UDDI specification, thus it could guarantee usability of response and append grid-like monitoring information of web service hosting environment to response, but modification to standard UDDI specification does not affect the interoperability. We also present two distributed and scale-well approaches for fully autonomous registries and cooperative registries to overcome the disadvantage of traditional registries. In other words, we provide an unstructured peer-to-peer network for fully autonomous registries and a structured peer-to-peer network for cooperative registries. The two kinds of peer-to-peer network for registries support complex query without influence oil inlet-operability, and they are a suitable candidates to extend traditional web service registries.
A NEW SAFE FRAMEWORK OF ENTERPRISE APPLICATION INTEGRATION BASED ON WEB SERVICES

Yuan Shuhong,Zhu Miaoliang,Yun Xia,Wu Di

DOI: https://doi.org/10.3969/j.issn.1000-386X.2008.01.048

2008-01-01

Abstract:Traditional Enterprise Application Integration(EAI) solutions lacking the support of the united standard have difficulties in resolving the main security problems such as authentication and authorization.To solve these problems,a brand new application integration security architecture based on Web Services WSSA-EAI is proposed.Web Services are applied to create general access interface,and SSO(Single Sign On) authentication and RBAC(Role-based Access Control)authorization are combined.A united EAI security architecture which is easy for maintenance is presented..
WEB SERVICES SECURITY MECHANISM AND SECURITY TECHNOLOGY

Cheng Zhan,Xie Li

DOI: https://doi.org/10.3969/j.issn.1000-386X.2008.10.007

2008-01-01

Abstract:Web Service security problem is one of the highlighted topics in information security area recently.This article presents two security mechanisms for Web Services,transport-level security and message-level security.Then the security technology used to implement message-level security is introduces in detail.Finally,it gives a conclusion to Web Service security and proposes a new Web Service layered security model.
Research on a Secure Semantic Web Services Framework

WANG Tian-jiang,JIANG Hua

DOI: https://doi.org/10.3969/j.issn.1007-130x.2007.04.004

2007-01-01

Abstract:Based on analyzing the requirements of Web services security,the paper proposes an extensible secure semantic Web services architecture(SSWSA),and introduces the process of dynamic service discovery, service engagement, service enactment and management,security hierarchy,and the corresponding security strategy of the model.The security of semantic Web services is improved effectively by extending the security of protocol stacks and appending a role of security certification.

DISTRIBUTED WEB SERVICE SECURITY MODEL WITH UDDI FUNCTION EXTENSION

Research on security extensions based on Java 2 security architecture

Supporting Security in Dynamic Cooperation of Cross-Enterprise Services

Construction of security architecture of web services based EAI

A Security Model Design in Web Service Environment

Secure digital watermark scheme based on Web Services

AN INTEGRATED WEB SERVICES SECURITY MODEL

On Web-Service-Based Dynamic Virtual Enterprise

A SECURE MODEL OF WEB SERVICE BASED ON THE EXPANSIBILITY Of SOAP

Research of Data Security of Distributed System-based Web Services

ADDI: an agent-based extension to UDDI for supply chain management

Verification of Web Services Using an Enhanced Uddi Server

Web Service Security Model for Cross-enterprise Multiparty Collaboration Application

Extended UDDI Architecture Based on Economic Model

Security In A Mobile Agent Based Ddm Infrastructure

An enhanced security mechanism for web service based systems

Distributed System Integration-Oriented Web Service Management Method

Enhance Uddi And Design Peer-To-Peer Network For Uddi To Realize Decentralized Web Service Discovery

A NEW SAFE FRAMEWORK OF ENTERPRISE APPLICATION INTEGRATION BASED ON WEB SERVICES

WEB SERVICES SECURITY MECHANISM AND SECURITY TECHNOLOGY

Research on a Secure Semantic Web Services Framework