Research of SOAP Message Security Model on Web Services - Advanced Research on Computer Education, Simulation and Modeling - page 101

4.1 WSE2.0 Introduction
WSE is also the extension of supporting .NET Framework. It is used to create and use
Web service, while WSE2.0 adopt new programming model. In the past, Web service
support depends on Internet Information Server (IIS) as its host HTTP server; now,
WSE 2.0 supports sending messages through TCP/IP or within the process [4,5]. In
this way, you can send message from server to client through a peer, one-way,
asynchronous method.
4.2 Implementation of Web Service Security Model
Using WSE to achieve the encryption and decryption of SOAP message and the
signature principle; the encrypted SOAP message get to the server through
transmission channel and decrypt and verify the signature there. Shown in Fig 2.
Fig. 2. Decryption and Signature of Soap Message
Implementation Method of Authentication with Username and Password.
WS-Security defines a Username Token element, which provides the basic user
name/password authentication method. It can send user name and password
credentials in SOAP header information. Credentials are sent as a part of <Security>
element in SOAP header. The client add Username-Token with a user name and
password (clear text or encryption) in SOAP through SOAP extension and send it to
Web server; after receiving the message, it also gets the user name and password from
context through extension and then authenticate or doing other operations[6]. The
following are the experimental procedures:
Client:
1) Add Microsoft.Web.Services reference;
2) Add Web reference to generate the local proxy class;
3) Modify local proxy class generated from Web service reference, code of this
class is in reference generation files. To open the Web service reference folder in
solution explorer that lies at the right side of .NET development environment,
opening up Reference. Map node, finding the Reference file and open it; to change
the inherit parent of class into Microsoft.Web.Services.WebService Client Protocol at
the statement of proxy class. Thus, proxy class can visit SOAP extension provided by
WSE. If you update the Web service reference, you need to re-modify the inherit
class;
4) Add username and password through Username Token. Username Token
belongs to Microsoft. Web.Services.Security. Tokens namespace;