Search:  
NamespacesDiscussions.NET v1.1Feedback
Web Services Security Model
Messages   Related Types
This message was discovered on ASPFriends.com 'aspngwebservices' list.


Padmanabhan, Raman
-- Copied from [aspngsec] to [aspngwebservices] by Yannick Smits <Click here to reveal e-mail address> --

Folks,

    I am trying to come up with a security model for a distributed
application that is installed within an organization. There are 2 important
entities in this distributed application:

1) Desktop Agent: This agent is an NT service that is installed on client
desktop/workstations (9X, NT, 2000, XP etc).
2) Server Agent: This agent is a web service that is installed on a server
(2000 Server/Advanced Server) with IIS 5.0.

The desktop agents collect secure data from the clients and use SOAP to
communiate with the server agent. In order to secure this application, I
need to:

1) Ensure the Desktop agent is an authorized agent
2) Make the transmission (data) secure

Are there any security guidelines available for such distributed
applications ??? I would highly appreciate any suggestions in this regard.

Thanks
-Raman
Reply to this message...
 
    
Srinivasa Sivakumar
Hi Raman,

If you are going to work on HTTP based web service then you can use Basic
with SSL or NTLM with SSL for authentication and security. If you want to go
with multiple protocols then you can look in the XML/SOAP encryption and
Digital Signature.

- Srinivasa Sivakumar
Author, Developer and Reviewer
http://www3.brinkster.com/webguru/

Latest Book: Visual Basic .NET Threading Handbook
http://www.amazon.com/exec/obidos/ASIN/1861007132/qid%3D1027952715/sr%3D11-1
/ref%3Dsr%5F11%5F1/102-2513938-2053769
----- Original Message -----
From: "Padmanabhan, Raman" <Click here to reveal e-mail address>
To: "aspngwebservices" <Click here to reveal e-mail address>
Sent: Friday, August 02, 2002 3:30 PM
Subject: [aspngwebservices] Web Services Security Model

> -- Copied from [aspngsec] to [aspngwebservices] by Yannick Smits
<Click here to reveal e-mail address> --
[Original message clipped]
Reply to this message...
 
 




Ad
MBR BootFX
Best-of-breed application framework for .NET projects, developed by Matthew Baxter-Reynolds and MBR IT
 
 Copyright © Matthew Baxter-Reynolds 2001-2008. '.NET 247 Software Development Services' is a trading style of MBR IT Solutions Ltd.
Contact Us - Terms of Use - Privacy Policy - www.dotnet247.com