background image

WS-I Specifications

<< JCP Specifications | Security Challenges and Threats >>
<< JCP Specifications | Security Challenges and Threats >>
WS-I S
PECIFICATIONS
239
This proposal is to define and incorporate the high-level implementation-
independent Java APIs.
· JSR 106: XML Encryption APIs
JSR-106 defines a standard set of APIs for XML digital encryption ser-
vices. XML Encryption can be used to perform fine-grained, element-
based encryption of fragments within an XML Document as well as
encrypt arbitrary binary data and include this within an XML document.
· JSR 155: Web Services Security Assertions
JSR-155 provides a set of APIs, exchange patterns, and implementation to
securely (integrity and confidentiality) exchange assertions between web
services based on OASIS SAML.
· JSR 183: Web Services Message Security APIs
JSR-183 defines a standard set of APIs for Web services message secu-
rity. The goal of this JSR is to enable applications to construct secure
SOAP message exchanges.
· JSR 196: Java Authentication Service Provider Interface for Containers
The proposed specification will define a standard service provider inter-
face by which authentication mechanism providers may be integrated
with containers. Providers integrated through this interface will be used to
establish the authentication identities used in container access decisions,
including those used by the container in invocations of components in
other containers.
WS-I Specifications
According to the Web Services Interoperability Organization (WS-I) web site,
WS-I is an open industry organization chartered to promote Web services
interoperability across platforms, operating systems and programming lan-
guages. Specifically, WS-I creates, promotes and supports generic protocols for
the interoperable exchange of messages between Web services. WS-I creates
profiles, which recommend what to use and how to use it from the various web
services specifications created by W3C, OASIS, and the JCP. WS-I is working
on the following profiles related to web services security. The profiles can be
viewed from the WS-I web site at
http://www.ws-i.org/deliverables/
Default.aspx
.
· Basic Security Profile (BSP)