Road to a secure Web service exchange

Abstract

This paper discusses XML security key technologies related with security of Web. Based on these discussions, Web service will be integrated with mature security architectures such as PKI (Public Key Infrastructure), XADES (XML Advanced Electronic Signature) and VPN (Virtual Private Network). A new architecture (called SWSSA for Simple Web Service Security Architecture) to secure SOAP messages exchange is proposed and its components are described.