| When data is exchanged between information systems, the security attributes associated with said data needs to be maintained.
Application servers provide a capability to exchange data between multiple web service hops. In application server terms, this is referred to as message layer security. While transport layer security ensures data security between two points, message layer security is built into the message itself and provides security across multiple hops.
Policy sets are used to specify how the message is to be protected (e.g., encrypt the entire message, portions of the message, or just sign the message). The application server must bind policy sets to messages when message layer security is employed.
|
