A Secure Web Services Model Based on the Combination of SOAP Registration Info and Token Proxy

Abstract

Along with the thorough development and application for Web services, the security of it has taken people¿s attention more and more. While Web services security (WSS) can exchange safe SOAP message and enhance the security of Web services, it will also have certain influence to the performance of Web services. In order to satisfy the security of it , to reduce the performance influence of Web services and to solve both the requester and provider side cannot recognize the security token, in this paper, we aim at proposing a SOAP information registration and security token proxy model for Web services (SIRSTPM). We has carried on the formalizing and verifying of this model. The result of theoretical verification shows this model is secure and effective. This model is helpful for solving the problem between security and performance contradiction as well as the token cannot be recognized by both the requester and the provider.