-
公开(公告)号:JP2010288313A
公开(公告)日:2010-12-24
申请号:JP2010183418
申请日:2010-08-18
Applicant: Internatl Business Mach Corp
, インターナショナル・ビジネス・マシーンズ・コーポレーションInternational Business Maschines Corporation Inventor: NADALIN ANTHONY JOSEPH , MCINTOSH MICHAEL , AUSTEL PAULA , HONDO MARYANN , NAGARATNAM NATARAJ
CPC classification number: G06F21/606 , G06F21/629 , H04L63/12
Abstract: PROBLEM TO BE SOLVED: To provide methods, systems and products in which secure data communications in web services are provided by receiving in a web service from a client a request containing an element bearing a first signature having a value, signing the value of the first signature, thereby creating a second signature, and sending a response from the web service to the client, the response including the second signature. SOLUTION: A requester 102 may verify that a response includes a second signature. The request may be encrypted, and the response may be encrypted. The first signature may be encrypted, and a web service 303 may encrypt the value of the first signature and include the encrypted value of the first signature in the response. The web service 303 may receive a request encoded in SOAP and may send a response also encoded in SOAP. COPYRIGHT: (C)2011,JPO&INPIT
Abstract translation: 要解决的问题:提供通过从客户端接收来自客户端的web服务来提供web服务中的安全数据通信的方法,系统和产品,该请求包含承载具有值的第一签名的元素,签名值 从而创建第二签名,并且从Web服务向客户端发送响应,该响应包括第二签名。 解决方案:请求者102可以验证响应包括第二签名。 该请求可以被加密,并且响应可以被加密。 第一签名可以被加密,并且网络服务303可以加密第一签名的值,并且将第一签名的加密值包括在响应中。 Web服务303可以接收以SOAP编码的请求,并且可以发送也以SOAP编码的响应。 版权所有(C)2011,JPO&INPIT
-
公开(公告)号:AT429768T
公开(公告)日:2009-05-15
申请号:AT06777270
申请日:2006-06-06
Applicant: IBM
Inventor: NADALIN ANTHONY JOSEPH , MCINTOSH MICHAEL , AUSTEL PAULA , HONDO MARYANN , NAGARATNAM NATARAJ
IPC: H04L29/06
Abstract: Methods, systems, and products are disclosed in which secure data communications in web services are provided generally by receiving in a web service from a client a request containing an element bearing a first signature, the signature having a value; signing the value of the first signature, thereby creating a second signature; and sending a response from the web service to the client, the response including the second signature. The requester may verify that the response includes the second signature. The request may be encrypted, and the response may be encrypted. The first signature may be encrypted, and the web service may encrypt the value of the first signature and include the encrypted value of the first signature in the response. The web service may receive a request encoded in SOAP and may send a response also encoded in SOAP.
-
公开(公告)号:CA2602101C
公开(公告)日:2014-04-08
申请号:CA2602101
申请日:2006-02-20
Applicant: IBM
Inventor: HONDO MARYANN , NADALIN ANTHONY , NAGARATNAM NATARAJ
IPC: H04L29/06
Abstract: A method, system and computer program product for implementing authorization policies for web services may include defining an authorization policy for access to a web service. The method, system and computer program product may also include attaching the authorization policy to a service definition for the web service.
-
公开(公告)号:DE602006006448D1
公开(公告)日:2009-06-04
申请号:DE602006006448
申请日:2006-06-06
Applicant: IBM
Inventor: NADALIN ANTHONY JOSEPH , MCINTOSH MICHAEL , AUSTEL PAULA , HONDO MARYANN , NAGARATNAM NATARAJ
IPC: H04L29/06
Abstract: Methods, systems, and products are disclosed in which secure data communications in web services are provided generally by receiving in a web service from a client a request containing an element bearing a first signature, the signature having a value; signing the value of the first signature, thereby creating a second signature; and sending a response from the web service to the client, the response including the second signature. The requester may verify that the response includes the second signature. The request may be encrypted, and the response may be encrypted. The first signature may be encrypted, and the web service may encrypt the value of the first signature and include the encrypted value of the first signature in the response. The web service may receive a request encoded in SOAP and may send a response also encoded in SOAP.
-
公开(公告)号:CA2602101A1
公开(公告)日:2006-10-12
申请号:CA2602101
申请日:2006-02-20
Applicant: IBM
Inventor: NAGARATNAM NATARAJ , HONDO MARYANN , NADALIN ANTHONY
IPC: H04L29/06
Abstract: A method, system and computer program product for implementing authorization policies for web services may include defining an authorization policy for access to a web service. The method, system and computer program product may also include attaching the authorization policy to a service definition for the web service.
-
-
-
-