Secure service oriented architecture (soa) applications for subscriber based web services and its intranet support

In this study, it is intended to develop secure subscriber based web services and service consumer applications. Security between the web services and the consumer applications will be established in the message layer with the signed security tokens defined in WS-Security specification. In addition, WS-Policy is also used to strengthen the security mechanisms. KerberosToken and X.509 Certificate which supply brokered authentication are the token types used in the implementations. By using those tokens, beside the basic security needs like authentication and authorization; some additional controls like auditing, SSO (Single Sign On) and non-repudiation will be enabled between the parties. Keywords : Service Oriented Architecture (SOA), Web Service, XML-Encryption, XML-Signature, WS-Security, WS-Policy, X.509 Certificate, Kerberos Token