Applied SOAP: Implementing .NET XML Web Services

Security Terms and Concepts

Before getting too deep into security, it's a good idea to make sure that we've defined the terms we'll be using throughout the chapter. It's easy to confuse authentication with authorization, for example. Table 10.1 lists some of the more important security terms you'll encounter when dealing with Web Services.

Table 10.1. Web Service Security Terminology

Term	Definition
Authentication	The act of verifying that a given user is capable of accessing the resource (“logging in”)
Authorization	The act of verifying that an authenticated user is allowed to perform certain actions (delete privilege versus simply read privilege)
Data integrity	Mechanisms that provide assurance that the data transmitted from site to site has ...