【正文】 ? ? Microsoft Architects Forum 43 WSTrust WSSecurity WSSecure Conversation WSTrust WSSecurity Policy WSFederation Microsoft Architects Forum 44 Motivation ? A trusts B but not C ? C trusts B but not A ? B issues token for A amp。 / wsp:MessagePredicate wsp:Usage=39。wsp:Required39。enUS39。utf839。wsp:Required39。 xmlns:p=39。pdAt] 1 : an act or instance of updating 2 : current information for updating something 3 : an uptodate version, account, or report Beat Schwegler Architect Microsoft EMEA HQ Microsoft Architects Forum 2 Challenges ‘We’ve been doing Web Services for years’ Microsoft Architects Forum 3 Challenges ‘Web Services are nothing else than firewall friendly rpc implementations.’ Microsoft Architects Forum 4 Challenges ‘Web Services are great! We’ve just enabled all our business objects as Web Services.’ Microsoft Architects Forum 5 Challenges ‘Web Services are based on XML. That’s why they’re simple. At the end it’s only text...’ Microsoft Architects Forum 6 Web Services Publisher B Publisher A Publisher C Bookstore Design time contract I’ll send a PO You’ll send a confirmation … Run time contract We’ll use SOAP over HTTPS We’ll use signed messages … Policy Between publishers we’ll use binary SOAP over MSMQ Everywhere else we’ll only allow SOAP over HTTPS … Microsoft Architects Forum 7 Web Services Platform Connected Applications Messaging XML Transports Secure Reliable Transacted Metadata Management Business Process … Devices Mobile P2P EAI B2B Grid Microsoft Architects Forum 8 Web Services Platform Connected Applications Transports Management Business Process Devices Mobile P2P EAI B2B Grid XML … Messaging Secure Reliable Transacted Metadata Microsoft Architects Forum 9 WS* Specifications (Overview) ? Messaging ? WSAddressing ? WSEventing ? MTOM (Attachments) ? Reliability ? WSReliableMessaging ? Security ? WSSecurity ? WSTrust ? WSSecureConversation ? WSFederation ? Transactions ? WSCoordination ? WSAtomicTransaction ? WSBusinessActivity ? Metadata ? WSPolicy ? WSPolicyAssertions ? WSPolicyAttachment ? WSSecurityPolicy ? WSDiscovery ? WSMetadataExchange See Specifications on MSDN Microsoft Architects Forum 10 WS* Specifications (Overview) ? Messaging ? WSAddressing ? WSEventing ? MTOM (Attachments) ? Reliability ? WSReliableMessaging ? Security ? WSSecurity ? WSTrust ? WSSecureConversation ? WSFederation ? Transactions ? WSCoordination ? WSAtomicTransaction ? WSBusinessActivity ? Metadata ? WSPolicy ? WSPolicyAssertions ? WSPolicyAttachment ? WSSecurityPolicy ? WSDiscovery ? WSMetadataExchange See Specifications on MSDN Microsoft Architects Forum 11 Messaging SOAP URI WSAddressing Microsoft Architects Forum 12 SOAP Envelope ? Distinction between header and body ? Allows extensibility ? Enables protocol posability ? For intermediaries as well as ultimate endpoints soap:Envelope xmlns:soap=... soap:Header /soap:Header soap:Body /soap:Body /soap:Envelope ! payload