WS-I Publishes Basic Security Profile 1.0

Standards Organizations
Typography
  • Smaller Small Medium Big Bigger
  • Default Helvetica Segoe Georgia Times

The Web Services Interoperability Organization has announced the publication of the WS-I Basic Security Profile (BSP) 1.0 as final material for public access.

BSP 1.0 is an essential guide for ensuring secure, interoperable Web services. The WS-I Basic Security Profile 1.0 builds on the work already completed in WS-I's Basic Profile 1.1. BSP1.0 is available from the WS-I Web site, at Basic Security Profile.

"Publishing the WS-I Basic Security Profile 1.0 is a major step toward achieving WS-IÆs objective of advancing interoperability for secure Web services," said Michael Bechauf, chairman and president of WS-I. "I congratulate the many WS-I members who have worked to make BSP 1.0 a reality."

WS-I is an open industry organization whose members promote Web services interoperability across platforms, operating systems and programming languages.

"An interoperability profile offers valuable guidance to product implementers and application developers regarding the interpretation of a specification," said Anne Thomas Manes, research director and vice president, Burton Group. "A specification typically supports a broad set of requirements and offers a variety of options and approaches, but these options can lead to misinterpretation and result in interoperability challenges. An interoperability profile constrains the options and makes communication easier."

The WS-I Board approved BSP 1.0 after receiving confirmation that five members demonstrated interoperability (IBM, Microsoft, Novell, Oracle and SAP; supporting statements from these companies are attached below). Following Board approval, the document was submitted to WS-I's membership, who voted to approve BSP 1.0.

"Security is a concern to any organization operating in the Web services sphere," said Paul Cotton, Chair of the BSP Working Group. "The WS-I Basic Security Profile 1.0 provides a strong foundation for the development of secure, yet interoperable Web services. We in the Working Group are now working on BSP 1.1, which builds upon that strong foundation."

About the Basic Security Profile

The WS-I Basic Security Profile is an interoperability profile that addresses transport security, SOAP messaging security and other security considerations for WS-I's Basic Profile 1.1, Simple SOAP Binding Profile 1.0 and Attachments Profile 1.0, which are available in final form at Working Group Deliverables

Specifically, the BSP1.0 focuses on the interoperability characteristics of two technologies: HTTP over TLS and Web Services Security: SOAP Message Security. HTTP over TLS is a point-to-point technology that protects the confidentiality of all information that flows over an HTTP connection. Web Services Security: SOAP Message Security provides security protection for SOAP messages and applies even when a message passes through several intermediary waypoints, allowing differing levels of protection for selected portions of a message. The BSP1.0 describes a way to apply SOAP Message Security to attachments. The BSP1.0 also incorporates Web Services Security: Username Token Profile, Web Services Security: X.509 Certificate Token Profile, Web Services Security: Kerberos Token Profile, Web Services Security: SAML Token Profile and Web Services Security: XRML Token Profile.

About WS-I

WS-I is an open, industry organization chartered to promote Web services interoperability across platforms, operating systems, and programming languages. The organization unites a diverse community of Web services companies to provide guidance, recommended practices and supporting resources for developing interoperable Web services.
BLOG COMMENTS POWERED BY DISQUS

LATEST COMMENTS

Support MC Press Online

$

Book Reviews

Resource Center

  •  

  • LANSA Business users want new applications now. Market and regulatory pressures require faster application updates and delivery into production. Your IBM i developers may be approaching retirement, and you see no sure way to fill their positions with experienced developers. In addition, you may be caught between maintaining your existing applications and the uncertainty of moving to something new.

  • The MC Resource Centers bring you the widest selection of white papers, trial software, and on-demand webcasts for you to choose from. >> Review the list of White Papers, Trial Software or On-Demand Webcast at the MC Press Resource Center. >> Add the items to yru Cart and complet he checkout process and submit

  • SB Profound WC 5536Join us for this hour-long webcast that will explore:

  • Fortra IT managers hoping to find new IBM i talent are discovering that the pool of experienced RPG programmers and operators or administrators with intimate knowledge of the operating system and the applications that run on it is small. This begs the question: How will you manage the platform that supports such a big part of your business? This guide offers strategies and software suggestions to help you plan IT staffing and resources and smooth the transition after your AS/400 talent retires. Read on to learn: