OASIS Approves New Web Services Security Standards

Mar 28, 2007

The Organization for the Advancement of Structured Information Systems has approved WS-SecureConversation and WS-Trust as standards.

The Organization for the Advancement of Structured Information Systems has announced that its members have approved WS-SecureConversation version 1.3 and WS-Trust version 1.3 as OASIS Standards.

The specifications were developed by the OASIS WS-SX (Web Services Secure Exchange) Technical Committee and they define policies and extensions to WS-Security that enable the trusted exchange of multiple SOAP (Simple Object Access Protocol) messages.

WS-Trust provides methods for issuing, renewing and validating security tokens as well as establishing, detecting and brokering trust relationships, OASIS officials said. Meanwhile, WS-SecureConversation allows security contexts to be created and key material to be exchanged more efficiently, OASIS said.

Together the standards can improve the performance and security of exchanges.

"In order to secure communication between two parties, both must exchange security credentials," said Anne Thomas Manes, research director with the Burton Group, in a statement.

"Before that can take place though, each party needs to determine if they can 'trust' the asserted credentials of the other. Applications that communicate using the Web services framework (e.g., SOAP and WSDL) can use WS-Trust to obtain and exchange security credentials - either directly or through a trusted third party - and use WS-SecureConversation to establish and maintain an extended secure session."

Kelvin Lawrence of IBM, co-chair of the OASIS WS-SX Technical Committee, said, "WS-Trust builds upon WS-Security by introducing an XML syntax and a protocol that enables the issuance and dissemination of credentials between different trust domains via a security token service."

Meanwhile, Chris Kaler, a Microsoft engineer and co-chair of the WS-SX committee, said, "WS-Security focuses on the security of a single message, which is useful in many situations. WS-SecureConversation adds a security context authentication model that is extremely beneficial for long-running exchanges. When two parties are passing multiple rounds of secured messages back and forth, the added security and efficiency provided by WS-SecureConversation becomes essential."

Among the industry leaders, IBM, Microsoft and Sun Microsystems have verified successful implementations of WS-SecureConversation and WS-Trust in accordance with eligibility requirements for all OASIS Standards.

However, Adobe, AmberPoint, Axway, BEA Systems, BMC Software, CA, EDS, Forum Systems, Fujitsu, HP, IBM, IONA, Microsoft, Neustar, Nokia, Nortel, Novell, Oracle, Progress Software, Red Hat, Ricoh, SAP, SOA Software, Software AG, Sun Microsystems, Tibco Software, VeriSign, and other members of OASIS collaborated to develop WS-SecureConversation and WS-Trust, OASIS officials said.

Copyright 2007 by Ziff Davis Media, Distributed by United Press International

Explore further: Denmark is world's most connected country

add to favorites email to friend print save as pdf

Related Stories

Wireless electronic implants stop staph, then dissolve

25 minutes ago

Researchers at Tufts University, in collaboration with a team at the University of Illinois at Champaign-Urbana, have demonstrated a resorbable electronic implant that eliminated bacterial infection in mice ...

Toxin targets discovered

25 minutes ago

Research that provides a new understanding of how bacterial toxins target human cells is set to have major implications for the development of novel drugs and treatment strategies.

Knightscope K5 on security patrol roams campus

57 minutes ago

A Mountain View, California-based company called Knightscope designs and builds 5-feet, 300-pound security guards called K5, but anyone scanning last week's headlines has already heard about them, with the ...

US northeast braces for flooding after record snow

21 hours ago

Weather forecasters and emergency officials warned Sunday that melting snow would lead to heavy flooding in parts of the US northeast, with hundreds of thousands of people told to brace for fast-rising waters.

Recommended for you

End to end 5G for super, superfast mobile

5 hours ago

A collaboration between NEC Electronics Samsung and several academic centres in China and Iran, is investigating how software-defined cellular networking might be used to give smart phone users the next generation of super-superfast ...

German study supports free "Super WiFi"

6 hours ago

The need for the wireless transfer of data will increase significantly in the coming years. Scientists at the Karlsruhe Institute of Technology (KIT) therefore propose to turn some of the TV frequencies that ...

WiFi hubs to replace New York pay phones

Nov 18, 2014

Thousands of high-tech terminals offering free WiFi and other services will soon replace New York's remaining fleet of seldom-used pay phones, the city mayor said Monday.

User comments : 0

Please sign in to add a comment. Registration is free, and takes less than a minute. Read more

Click here to reset your password.
Sign in to get notified via email when new comments are made.