Current Web services architectures are confronted with a few stubborn problems, and the security problem becomes one of the bottlenecks that restrict the extensive application of Web service. After compared transport level with message level secu- rity, the limitation of transport level security became clearly. And then on the basis of the analysis message level security, espe- cially WS-Security, XML security protocol was adopted to guar- antee message level security. Because WS-Security is a new protocol jointly developed by Microsoft and IBM among these XML security protocols, and a security-token mechanism of WS-Security mechanism was improved, added a table with secu- rity-token types. And a new model consisting of multiple secu- rity-token is put forward to guarantee the security of message transmission.
LIU ZhenpengSONG XiaojingTANG WanshengCHANG XiaomengZHOU Dongdong
