web services standards. introduction a web service is a type of component that is available on the...
TRANSCRIPT
![Page 1: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/1.jpg)
Web Services Standards
![Page 2: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/2.jpg)
Introduction• A web service is a type of component that is
available on the web and can be incorporated in applications or used as a standalone service
• The goal of web services is to achieve universal interoperability between applications by using Web standards.
• There are three organizations that are key to the evolution of Web services standards. – W3C– OASIS– WSI Organization
![Page 3: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/3.jpg)
Basic Web Services Standards
• XML (eXtensible Markup Language) 1.1
• SOAP 1.2 (Simple Object Access Protocol)
• WSDL (Web Services Description Language) 1.1
• UDDI (Universal, Description, Discovery, and Integration) 3.0.2
![Page 4: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/4.jpg)
XML 1.1
• Developed by W3C
• Fee-free open standard
• Its primary purpose is to facilitate the sharing of structured data across different information systems, particularly via the Internet.
• A subset of SGML (Standard Generalized Markup Language)
![Page 5: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/5.jpg)
SOAP 1.2
• OASIS Standard
• SOAP version 1.2 is a lightweight protocol for exchange of information in a decentralized, distributed environment.
![Page 6: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/6.jpg)
SOAP 1.2 Structure
<?xml version="1.0"?>
<soap:Envelope xmlns:soap=http://www.w3.org/2001/12/soap-envelope
soap:encodingStyle="http://www.w3.org/2001/12/soap-encoding">
<soap:Header>
... ...
</soap:Header>
<soap:Body>
... ...
</soap:Body>
</soap:Envelope>
SOAP Envelope
SOAP Header
SOAP Body
![Page 7: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/7.jpg)
04/20/23 7
SOAP security
• No security specification
• The SOAP Header provides a flexible mechanism for extending a SOAP message.
• Although the SOAP Header is the best place to add security features to messages, the SOAP specification itself does not specify such header elements.
![Page 8: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/8.jpg)
Why do we need SOAP Layer Security?
• Don't we already have transport layer security mechanisms such as SSL/TLS and IPSec?
• Secure transport protocols such as SSL/TLS can assure the security of messages during transmission.
• However, messages are received and processed by intermediaries.
• Communication links are trusted, but do we trust these intermediaries?
• Once a message is received and decrypted, how to protect data from illicit access or alteration?
![Page 9: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/9.jpg)
WSDL
• It is an XML-based language for describing Web Services and how to access them.
• It specifies the location of the service and the operations the services exposes.
• A WSDL document is simply a set of definitions.
![Page 10: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/10.jpg)
WSDL Structure
Definitions
Types
Message
Port Types
Binding
…
http://www.w3schools.com/wsdl/wsdl_binding.asp
![Page 11: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/11.jpg)
UDDI
• The Universal Description, Discovery, and Integration specs define a way to publish and discover information about Web services.
• The UDDI business registration is an XML file that describes a business entity and its Web services
![Page 12: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/12.jpg)
UDDI security
• Not specified in detail, only general policies
• Only authorized individuals can publish or change information in the registry
• Changes or deletions can only be made by the originator of the information
• Each instance of a registry can define its own user authentication mechanism
![Page 13: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/13.jpg)
UDDI Schema
http://www.idealliance.org/papers/xml02/dx_xml02/papers/04-02-01/04-02-01.html
Web Services Repository
Publicize
Use
Discover12
3
Web Services Provider
Web Services Client
![Page 14: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/14.jpg)
Layers and Web Services Standards
![Page 15: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/15.jpg)
Web Services Stack
XMLXMLMESSAGINGMESSAGING
DESCRIPTION AND DESCRIPTION AND DISCOVERYDISCOVERY
SECURITSECURITYY
RELIABRELIABLELE
TRANSACTITRANSACTIONON
BUSINESSBUSINESS MANAGEMENTMANAGEMENT
![Page 16: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/16.jpg)
XML Specifications
• These specifications provide all the information necessary to understand XML .
• Some XML specifications are:– XML 1.1
– XML Namespace
– XPath 2.0
![Page 17: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/17.jpg)
![Page 18: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/18.jpg)
• Transports: These standards are used to provide a framework
for transporting documents using application protocols.
• Messaging: These standards are used to provide a framework
for exchanging information in a distributed environment.
• Description and discovery: This standard contains the
definition of set of services that contains the description of
businesses and exchanging.
![Page 19: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/19.jpg)
Cont..,
• Reliability: This specification gives the assurance of
the completion of message exchanging.
• Transactions: This specification is used to control
the operations and outcome of an application.
• Security: This specification provides a secure
communication.
![Page 20: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/20.jpg)
Cont..,
• Business Processes: This specification specifies the
execution order of operations from a collection of
services.
• Management: This specification manages the
availability, performance and usage of a web service.
![Page 21: Web Services Standards. Introduction A web service is a type of component that is available on the web and can be incorporated in applications or used](https://reader036.vdocuments.us/reader036/viewer/2022070400/56649eea5503460f94bfb33e/html5/thumbnails/21.jpg)
The End
…Thank you…