PKI and UDDI based trust centre: an attempt to improve web service security

Wiem Rekik (1, 2) , Maher Khemakhem (2) , Abdelfettah Belghith (2) , Jacques Fayolle (1)

1 DIOM - Dispositifs et Instrumentation en Optoélectronique et micro-ondes
2 CRISTAL - Centre de Recherche Réseau Image SysTème Architecture et MuLtimédia

Nowadays Internet becomes the most used tool for the ever increasing amount of various transactions between institutions, organizations and more generally between clients and providers. Conducted studies and experiments showed that it is more convenient to provide and achieve these transactions as web services (WS) to guarantee their flexibility and their reuse. So far these services and the corresponding providers' URLs are advertised on specific UDDIs (Universal Description, Discovery and Integration). As such, after finding the requested service any given client contacts the right provider to negotiate the service access procedure. These first contacts between clients and providers are usually and ommonly not protected (Encrypted) yielding enough room for Hackers to intrude into these unprotected messages. In this paper, we propose a securing approach based on both the PKI nfrastructure and some proposed improvements of the UDDI functioning in an attempt to provide adequate security for web services

Keywords: security; web service; trust centre

Domains: Computer Science [cs]; Web

Wiem Rekik, Maher Khemakhem, Abdelfettah Belghith, Jacques Fayolle. PKI and UDDI based trust centre: an attempt to improve web service security. The 4th International Conference for Internet Technology and Secured Transactions (ICITST-2009), Nov 2009, London, United Kingdom. pp. ⟨ujm-00400071⟩