Web services security describes enhancements to SOAP messaging to provide quality of protection through message integrity, message confidentiality, and single message authentication. In this paper, we propose an implementation based on proxy mechanism. We devise an architecture that provides authentication based on PKI and authorization based on PMI to Web service with least influence of the original codes to call Web service. We also provide configuration interface for users to change their default security policy. Our system is independent of any web service server and independent of any programming language. You can you it without or just a bit of modification to your source codes.
['Jian Wu', 'Zhimin Huang']
Proxy-Based Web Service Security