Chapter 10. Supporting technologies 439
security tokens. It defines the core facilities for protecting the integrity and
confidentiality of a message and provides mechanisms for associating
security-related claims with the message.
The Web Service security specification is available at
http://www.ibm.com/developerworks/library/ws-secure/; it proposes a
standard set of Simple Object Access Protocol (SOAP) extensions that you can
use to build secure Web Services. These standards confirm integrity and
confidentiality, which are generally provided with digital signature and encryption
technologies. In addition, Web Services security provides a general purpose
mechanism for associating security tokens with messages. A typical example of
the secur ...