Secure Web Service Service Transportation Secure Web Transportation - - PowerPoint PPT Presentation
Secure Web Service Service Transportation Secure Web Transportation for HL7 V3.0 Messages for HL7 V3.0 Messages Authors: Somia Razzaq, Maqbool Hussain, Muhammad Afzal, Hafiz Farooq Ahmad Somia Razzaq, Maqbool Hussain, Muhammad Afzal, Hafiz
Authors:
Somia Razzaq, Maqbool Hussain, Muhammad Afzal, Hafiz Farooq Ahmad
NUST School of Electrical Engineering and Computer Science, Pakistan
Somia Razzaq, Maqbool Hussain, Muhammad Afzal, Hafiz Farooq Ahmad
Presented By: Muhammad Afzal 08 May, 2009
2
3
4
SSL provides point-to-point security but there is need of end-to-end security solution SSL operates at the transport level and not at the message level SSL does not support element-wise signing and encryption SSL does not support non-repudiation
5
Provide implementation guidelines to promote interoperability between implementers using standard that fall under the general definition of web services Standardization of information among Healthcare Standardization of information among Healthcare applications without caring about the heterogeneity
Promote interoperability as recommendations from
account Help to utilize the resources efficiently
6
Give idea about basic message exchange specification Does not focus on advanced services such as
Does not focus on advanced services such as “Security”
Focuses on Message addressing properties and end-point references There is need to adopt appropriate security measures
7
General-purpose mechanism for associating security tokens with message content Methods for signing and encrypting the messages Methods for signing and encrypting the messages How to establish a security context How to implement authentication mechanism for multiple message exchanges How to exchange shared secrets or keys How to establish or determine Trust
8
X.509 Kerberos SAML Username
XML Signature XML Encryption
9
This component is responsible for requesting,
This component helps to find "Who is the caller?" and "How does she/he prove her/his identity?" by using security tokens attached to each message This component takes the derived token from the Token Management component, attach the derived token with the SOAP message and sign the whole
responsible for requesting, issuing, renewing, and validating security tokens in
relationships Its working is based on WS-Trust WSSecureConversation WS-Policy
attached to each message Its working based on Security Tokens Username Token Binary security tokens (X.509 certificates, Kerberos tickets) XML-based security tokens (SAML, REL) message and sign the whole
component verifies the signatures for ensuring the integrity of messages Its working based on XML Signature This component is responsible to provide confidentiality and privacy of the messages Its working is based on XML Encryption
10
% &'() **+,"-.)!/ %) ,$%-. %0)'-1&-2)%0)'- %*&1&%*& %*&1%*& %)
3)'4
! "%2222*)'*6 " " 7896:*;- # "%2222*)'*6" #$!%&%'()*(+,,,-#$!
%=5'>:" +'*")"%2222*)' 5 56 %<*,:" +'*")"%2222*)'*6" %805 7896:*;- %#*:" +'*")"%2222*)'*6" #$!%&%'()*(+,,,-#$! %805%<*90 !$!//012034)/$56,
%?-902%<5,-(@805 %?-90 %<*,-.!&-</ 7& 2,%9:*;- 88A, 89$: 88A,
Signature
;(<&
11
#$!
% &'() **+,"-.)!/ %) ,$%-. %0)'-1&-2)%0)'- %*&1&%*& %*&1%*&
HL7 V3.0 Message
%=5'>:" +'*")"%2222*)' 5 56 %<*,:" +'*")"%2222*)'*6 "
SOAP containing HL7 V3.0 Message with Signature
#& => (!1<&? $ %*&1%*& %)
56 ! "% 2222*)'*6 " " 7896:*;- # "%2222* )'*6" #$!%&%'()*(+,,,- #$!
%805 7896:*;- %#*:" +'*")"%2222*)'*6" #$!%&%'()*(+,,,-#$! %805%<*90 !$!//012034)/$56,
%?-902%<5,-(@805 %?-90 %<*,-.!&- 7& 2,%9:*;- 88A, 89$: 88A, -7&-
12
<%1&')'%< )'%2)'%2,)'% )'%5 <%/2%<5,- 5%805$5%#805 7896/$)*B-9# 5%805$2%<5,- <%/ <%;- <%1&')'%< )'%2)'%2, )'%)'%5 <%/ 2%<5,- 5%15-?-
2%<5,-(@805 %C9,<' %C9,.) #=9111=D#=5) <%;- 5%15-# 9/$)*B-9# %?-90%?-.)=./$:*D =E%?-.)%?-90 5%="# 5%="F',5%="F', 5%="# 5%15-# <%;- <%1&' &!6& #=9111=D#=5) %C9,.) %C<'.,)B%C<'., )B %C9,<' 2%<5,-(@805 %?-90
<%/ <%;- 5%15-# 9B-9# 5%="# 5%="F',5%="F', 5%="# 5%15-# <%;- <%1&' &! 6&
13
14
http://java.sun.com/developer/technicalArticles/WebServices/security/
initiatives, September 2008, version 1
Source HL7 Version 3 for e-Health Services”IHIC 2008
1 - May 2008
Draft 02, 25 March 2008
15
16