PowerExchange for Web Services User Guide for PowerCenter

10.5
- 10.5.9
- 10.5.8
- 10.5.7
- 10.5.6
- 10.5.4
- 10.4.0

Back Next

Security and Web Services

When a web service consumer or a web service provider sends or receives data over a network, the data is subject to security risks. Both web service consumers and providers share the following security concerns:

Authentication
. Web service providers and consumers must verify the identity of each user before transmitting data. They must also verify the origin of data before transmitting it.

Confidentiality
. Web service providers and consumers must prevent third parties from deciphering any intercepted data.

Data integrity.
Web service providers and consumers must ensure that data has not been lost, modified, or destroyed during transmission.

The following primary types of security are available to address these concerns:

Message-layer security
. Security embedded in a web service message. Message-layer security can include encryption to secure SOAP messages. It can also include certificates and security tokens for authentication and confidentiality.

Transport-layer security
. Security implemented on top of the transport layer (TCP layer) of TCP/IP using Secure Sockets Layer (SSL). Transport-layer security enables web services to use Hypertext Transfer Protocol over SSL (HTTPS) as a web address for secure message transport.

PowerExchange for Web Services provides message-layer security by adding a WSSE security header which contains authentication information for the web service provider to authenticate the PowerCenter Integration Service.

PowerExchange for Web Services provides transport-layer security in the following situations:

When importing a WSDL file from a web server that uses transport-layer security.

When the PowerCenter Integration Service sends a web service request to a web server and receives a response.

Understanding PowerExchange for Web Services

SSL Authentication Components

Types of SSL Authentication

Transport-Layer Security

Authentication in Web Services

Cookie Authentication

POODLE Vulnerability Fix

Download Guide

Watch