Study on Web Services Security Mechanism

Web services,as a mainstream technical standard for SOA implementation,has now been applied extensively,and its security is worthy of high attention. This paper studies the security mechanism of Web services based-on the WS-security standards,analyses the standards it follows,and describes the function of security services. It gives an applicable Web services protection solution from the aspects of identification,SOAP message security and access control based on engineer practice. This solution can implement the core security protection functions of Web services,and has directive significance for Web services-based SOA system's security protection.