A Study on the Security Mechanism for Web Services

Web Service has been widely used in the field of distributed application system. But the security issue of the Web Service has often been considered as a crucial barrier to its application in many fields that conducts sensitive information, such as E-commerce. In the paper, the authors introduce the Security Token Service (STS) into Web Service firstly, and then present a STS-based security architecture for Web Services and describe the architecture in some details.