关键词: Web服务认证，SAML，基于身份的聚合签名，SVO逻辑，性能分析

Abstract: To resolve the problem of increasing the length of SOAP message and reducing the respond speed of Web service seriously during the PKI-based signature to protect the SAML assertion, the paper proposed the SAML path verification protocol based on identity aggregate signature(II3ASPV),which improveds the respond speed of Web scrv- ice by shortening the length of the signature and the public key to reduce the transport time of SOAP message. I3y using SVO logic, we proved that the IBASPV protocol can ensure the integrity of the SAMI. assertion and source unforg(一 ability, and can protect the transmission path which can not be tampered with, and can prevent anti-replay attacks. I3y measuring the cryptographical calculation time and transport time based on Rampart module, we analyzed the trend that these factors which cause response time increase with the network data transport speed. Finally, we compared the per- formance of Web service based II3ASPV protocol with that based on PKI signature.

Key words: Web service authentication, SAMI，Identity-based aggregate signature, SVO logic, Performance analysis