WS-SecureConversation in WSIT
Wednesday May 17, 2006
Project Tango
is a Sun
initiative focused on delivering inter operable Web services
technologies. Web Services Interoperability Technology (WSIT)
is an open-source implementation of next generation Web services
technologies that deliver interoperability between Java EE and .Net
to help you build, deploy, and maintain Composite Applications for
your Service Oriented Architecture. It is focused on four main
categories: Messaging, Metadata, Security, and Quality-of-Service
(QoS).
WS-SecureConversation defines extension to the WS-Security standard. It
addresses two major issues for using WS-Security in multiple message
exchanges: performance and security weakness while using encryption
keys repeatedly. It introduces the concept of security session in terms
of security context with authentication state and negotiated session
keys for securing messages. It also defines derived key mechanism which
allows new key materials to be used to increase the overall security.
The security context is represented by a security context token and
can be applied within the WS-Security framework. The sharing and
managing of the security context is based on the general framework in
WS-Trust.
Sun and Microsoft have been successfully working together in testing many interoperability scenarios in secure conversation. The integration of all the components in WSIT is well designed and transparent to anyone who wants to build and use secure web services. Netbeans provides easy to use wizards and editors to rapidly develop , customize and assemble web services and web service clients. GlassFish provides a top class production ready container to develop and run your services. Together, all these open source components projects provide great value to developers and companies engaged in web services. So, use it and participate in it by joining the project, reporting issues, providing feedback or bug fixes, proposing enhancements and helping other users of this community project.
For information on Web Services Interoperability Technology (WSIT), please go to http://java.sun.com/webservices/interop For more information on the open source project on java.net, please go to project page at https://wsit.dev.java.net
|
|
|
|
