Web Services 使得基于XML 技術的分布式計算成為可能，它被看作是將會替代現存
的諸如CORBA、Java RMI 和DCOM 等舊的分布式應用解決方案的一種新興技術。Web
Services 應用中的最為基本的問題就是Web Services 的安全問題，它是諸多需要被解決的問題中的最為重要的部分，所以保障用戶的驗證、授權、信息的機密性、完整性和不可否認性就顯得十分必要了。論文中，通過引進Web Services 屬性證書和對WSDL 進行擴展的方法為Web Services 用戶提供了一種行之有效的用戶授權方法。
關鍵詞：Web Services；屬性證書；訪問控制；驗證；授權

An Authorization Mechanism for Web Services using an improved Attribute Certificate and
WSDL CAO Peng1,ZHANG Yongping2 (College of Computer Science, China University of Mining and Technology, Xuzhou Jiangsu Province,221008,China) 【Abstract】Web services make the distributed computing based on XML technology possible and are being watched with a new technology to replace the existing distributed computing such as CORBA,Java RMI,and DCOM.One of the issues those should be basically solved to deploy web services is just Web services security.It is necessary to satisfy the security features like user authentication,confidentiality,integrity,non-repudiation,and user authorization.In this paper,we design and implement a system that makes the effective authorization for web service users possible by using an attribute certificate for web services.
【Key words】Web Services,Attribute Certificate,Access Control,Authentication,Authorization