基于Web服务的使能服务平台安全机制

介绍了一个在网络经济模式下,基于Web服务的、支持中小企业动态联盟的使能服务平台,并分析了其中面临的安全威胁,提出了一套适用该平台的安全机制·该安全机制可以为用户提供信息通信保密,访问权限控制,数字签名,身份认证,密钥管理以及入侵检测等安全性保障·其中使用了AES和混沌密码算法进行数据加密,RSA算法用于数字签名和密钥交换,Guillou Quisquater协议用于身份认证,一个基于RSA的秘密共享体制保存密钥·在入侵检测系统中,综合使用了神经网络,数据挖掘和计算机免疫方法·最后,分析了其安全性·

Security Mechanism of a Web Service-based Enabling Platform

An enabling service platform based on web services was introduced. This platform was designed for medium-small scale enterprises allying dynamically for their business processing. The security threats to it were analyzed. A set of security mechanism suited for the platform was proposed. According to the mechanism, the function such as information security, access control, digital signature, authentication and intrusion detection were provided. In the mechanism, AES and chaos-based stream cipher algorithms were applied for data encryption. RSA algorithm was applied for both digital signature and key exchange. Guillou-Quisquater protocol was applied for authentication and a RSA-based secrete-sharing scheme was proposed for key storage. Neural network, data mining and computer immunology-based methods were incorporated in the intrusion detection system. The security of the mechanism was analyzed.