Secure data communications in web services
    1.
    发明申请
    Secure data communications in web services 审中-公开
    在Web服务中安全的数据通信

    公开(公告)号:US20060294383A1

    公开(公告)日:2006-12-28

    申请号:US11168716

    申请日:2005-06-28

    IPC分类号: H04L9/00

    摘要: Methods, systems, and products are disclosed in which secure data communications in web services are provided generally by receiving in a web service from a client a request containing an element bearing a first signature, the signature having a value; signing the value of the first signature, thereby creating a second signature; and sending a response from the web service to the client, the response including the second signature. The requester may verify that the response includes the second signature. The request may be encrypted, and the response may be encrypted. The first signature may be encrypted, and the web service may encrypt the value of the first signature and include the encrypted value of the first signature in the response. The web service may receive a request encoded in SOAP and may send a response also encoded in SOAP.

    摘要翻译: 公开了一种方法,系统和产品,其中Web服务中的安全数据通信通常通过从客户端接收web服务来提供包含具有第一签名的元素的请求,该签名具有值; 签署第一签名的价值,从而创建第二个签名; 以及将所述web服务的响应发送到所述客户端,所述响应包括所述第二签名。 请求者可以验证响应包括第二个签名。 该请求可以被加密,并且响应可以被加密。 可以对第一签名进行加密,并且web服务可以加密第一签名的值并将第一签名的加密值包括在响应中。 Web服务可以接收以SOAP编码的请求,并且可以发送也以SOAP编码的响应。