文档介绍：上海交通大学硕士学位论文中文摘要I基于Web服务的电子商务安全性研究摘要Web 服务是实现电子商务应用的一种较新的技术,是动态电子商务的关键技术,是延伸和连接现有的企业应用,实现企业对企业应用集成的革命性技术。论文根据目前的电子商务应用的现状,针对传统的电子商务解决方案实现模式和实现方法的不足,以及电子商务面临的安全问题,将先进的 Web 服务技术引入电子商务系统的研究之中。重点就基于Web 服务的电子商务应用的安全性作了研究。论文首先介绍了Web服务的体系结构及相关技术,阐述了电子商务模式的发展,随后详细分析了Web服务的概念、特点、应用范围、关键技术和体系结构。然后结合WS-Security安全规范等 Web 服务的安全要求,重点讨论了SAML(安全声明标记语言)的原理和应用,从应用层的角度对Web服务的安全性进行了详细分析。接下来通过一个B2B电子商务平台模型,用Java EE 5设计实现该平台的集成架构,并详细分析了该平台存在的各种安全需求。论文的最后针对这个B2B模型的安全需求,讨论了Web服务安全技术SAML在电子商务中的应用,主要从身份验证,数据保护,授权等三个方面作了详细的讨论。关健字:Web服务,电子商务,安全,XML,SAML 上海交通大学硕士学位论文英文摘要II RESEARCH OF E-BUSINESS SECURITY BASED ON WEB SERVICES ABSTRACT Web Services is a new technology of E-Business(Electronic Business.), which plays a key role for dynamic E-Business. It is a revolutionary solution for extending current enterprise application and implementing B2B application integration. Taking into consideration the insufficiency of the current patterns and methods for the traditional E-Business solution and the possible security threat, this paper incorporates advanced Web Services technology into the E-Business system. The main work focuses on the security demand and features for the E-Business. Firstly, this paper gives out an overview of the architecture and related technologies for Web Services. It also describes the development of the E-Business. Then, the paper analyzes the concepts, features,application scope, key technology and architecture for Web Services. Combined with the WS-security standards and other security standards,the theory and application of SAML(Security Assertion Markup Language) are discussed. From the application's perspective,it analyzes the security of Web Services. Later, the paper proposes a B2B E-Business integration framework based on Java EE 5. It depicts various security requirements for the platform,either. Finally,based on prior work,the paper discusses the application of SMAL for E-Business, focusing on authentication, data protection and authorization. Key Words: Web Ser