The main security mechanisms are: SSL

SSL (Secure Socket Layer) when applied to small devices provides authentication, data integrity, and privacy services. Currently, the solution to send confidential information to Web Services is to use a security mechanism, SSL over HTTP also known as HTTPS (Hypertext Transfer Protocol Secure). This mechanism protects confidential information and is easy to configure. Its disadvantage is slower than the unencrypted HTTP transactions and is therefore not suitable for transfer rates of data rates.

XML signature

The XML Signature [IETF and W3C 2000] is a joint initiative of the IETF (Internet Engineering Task Force) and W3C to specify XML syntax and processing rules for creating and representing digital signatures. The advantages in using XML Signature, unlike other rules of digital signatures are based on the independence of programming language, easy human interpretation and independence of the manufacturer. This technology also allows you to digitally sign a document subset of XML.

XML Encryption

The XML Encryption [IETF and W3C 2002] specifies a process for encryption of data and its representation in XML format. The data may be arbitrary data (including an XML document), XML elements or XML element content. An XML document that uses XML Encryption can be viewed by any user, and only the owner of the decryption key will be able to understand the encoded content.

Web Services Security

WS-Security (Web Services Security) is a joint initiative of companies like Microsoft, IBM and VeriSign for the use of XML-Signature and XML-Encryption to provide security to SOAP messages. WS-Security is an effort to make Web services work best in a global environment. WS-Security also includes some important components such as routing, reliability and transaction handling.

SAML

The SAML (Security Assertion Markup language) is an emerging standard for exchanging information on authentication and authorization. The SAML solves an important problem for applications of next generation, which is the possibility of users carry their rights among different Web Services. This is important for applications that intend to integrate a number of Web Services to form a unified application.

Continued…

Related posts:

1. Web Service Solutions | Part 1
2. Web Service Solutions | Part 3
3. Web Service Solutions | Part 4
4. Windows Web Hosting Solutions
5. Linux Web Hosting Solutions
6. Secure Ecommerce Web Hosting Solutions
7. Business Web Hosting Solutions – Basics

Tags: secure socket layer, security mechanisms of web services, security of web services, ssl, web service solutions

This entry was posted on Friday, January 29th, 2010 at 11:23 am and is filed under Web Hosting Articles. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.