摘要
Web服务是一种崭新的分布式计算模式,是下一代电子商务的框架。Web服务的发展提出了许多安全挑战,其中主要的挑战之一就是要设计安全且有效的跨域身份认证机制。安全声明标记语言(SAML)标准的出现为解决这一问题带来了希望。本文分析了目前存在的Web服务的认证方式的优缺点,讨论了几种与Web服务相关的标准和协议,重点分析和研究了基于SAML的跨域单点认证机制的实现原理和特点,并讨论了其安全问题。
Web service is a new distributed computing mode, and is the framework of the next generation e-commerce. The development of Web Services poses a lot of security challenges, and a key challenge amongst them is the design of secure and effective cross-domain identity authentication mechanisms. Security Assertion Markup Language （SAML） brings the hope of addressing successfully this issue. This paper analyzes the existing authentication mechanisms for web services, and discusses some kinds of standards and protocols relating to web services authentication. Especially, SAML-based cross-domain authentication mechanism and related security problems are analyzed and discussed.
出处
《培训与研究（湖北教育学院学报）》
2005年第5期21-25,共5页
Training and Research-Journal of Hubei College of Education
基金
湖北省教育厅重点项目资助(D2005005)
