Skip to main content

By clicking Submit, you agree to the developerWorks terms of use.

The first time you sign into developerWorks, a profile is created for you. Select information in your developerWorks profile is displayed to the public, but you may edit the information at any time. Your first name, last name (unless you choose to hide them), and display name will accompany the content that you post.

All information submitted is secure.

  • Close [x]

The first time you sign in to developerWorks, a profile is created for you, so you need to choose a display name. Your display name accompanies the content you post on developerworks.

Please choose a display name between 3-31 characters. Your display name must be unique in the developerWorks community and should not be your email address for privacy reasons.

By clicking Submit, you agree to the developerWorks terms of use.

All information submitted is secure.

  • Close [x]

Select a language:

  • Close [x]
  • Close [x]

Web Services Secure Conversation Language

Contributors:  IBM, BEA Systems, Microsoft, Computer Associates, Actional, VeriSign, Layer 7 Technologies, Oblix, OpenNetwork Technologies, Ping Identity, Reactivity, RSA Security

Summary:  The recently updated Web Services Secure Conversation Language (WS-SecureConversation) is built on top of the WS-Security and WS-Trust models to provide secure communication between services.

Date:  01 Feb 2005 (Published 01 May 2004)
Level:  Advanced

Activity:  5958 views
Comments:  

The recently updated Web Services Secure Conversation Language (WS-SecureConversation) is built on top of the WS-Security and WS-Trust models to provide secure communication between services.

The Web Services Secure Conversation Language (WS-SecureConversation) is built on top of the WS-Security and WS-Policy models to provide secure communication between services. WS-Security focuses on the message authentication model but not a security context, and thus is subject several forms of security attacks. This specification defines mechanisms for establishing and sharing security contexts, and deriving keys from security contexts, to enable a secure conversation.

By using the SOAP extensibility model, modular SOAP-based specifications are designed to be composed with each other to provide a rich messaging environment. As such, WS-SecureConversation by itself does not provide a complete security solution. WS-SecureConversation is a building block that is used in conjunction with other Web service and application-specific protocols (for example, WS-Security) to accommodate a wide variety of security models and technologies.

Get the specification and related material

DescriptionDateAccess method
WS-SecureConversation Language specification (PDF, 199KB)February 2005HTTP download
WS-SecureConversation Language XSD February 2005HTTP Web page

If you would like to contribute technical comments on this specification, please do so through our Feedback page.

You can still view the previous version of this specification by clicking on the following link:


Resources

  • Read the related Web Services Trust specification that explains how trust relationships are defined between Web services.

  • Web Services Addressing defines how to identify services across a network.

  • Web Services Policy Framework defines how to apply policies to control individual services behavior.

  • Web Services Security describes enhancements to SOAP to provide quality of protection through message integrity, confidentiality, and authentication.

  • WS-SecurityPolicy is a building block that is used in conjunction with other Web service and application-specific protocols to accommodate a wide variety of security models.

  • SOAP 1.1 is the basic messaging transport for all Web services while SOAP 1.2 offers enhancements to the message framework.

  • WSDL 1.1 is the current standard language for services description.

  • XML Schema, Part 1 and Part 2 are specifications that explain how schemas are organized in XML documents.

Comments

Back to top

Close [x]

Help: Update or add to My dW interests

What's this?

This little timesaver lets you update your My developerWorks profile with just one click! The general subject of this content (AIX and UNIX, Information Management, Lotus, Rational, Tivoli, WebSphere, Java, Linux, Open source, SOA and Web services, Web development, or XML) will be added to the interests section of your profile, if it's not there already. You only need to be logged in to My developerWorks.

And what's the point of adding your interests to your profile? That's how you find other users with the same interests as yours, and see what they're reading and contributing to the community. Your interests also help us recommend relevant developerWorks content to you.

View your My developerWorks profile

Return from help

Close [x]

Help: Remove from My dW interests

What's this?

Removing this interest does not alter your profile, but rather removes this piece of content from a list of all content for which you've indicated interest. In a future enhancement to My developerWorks, you'll be able to see a record of that content.

View your My developerWorks profile

Return from help

static.content.url=http://www.ibm.com/developerworks/js/artrating/
SITE_ID=1
Zone=SOA and web services
ArticleID=153089
SummaryTitle=Web Services Secure Conversation Language
publish-date=02012005

Dig deeper into SOA and Web services on developerWorks

My developerWorks community

Interact, share, and communicate with developers worldwide.

My developerWorks overview

Share this page:

  • Close [x]

Follow developerWorks:

  • Close [x]