Securing XML Web Services with Elliptic Curve Cryptography

A method to provide secure XML Web services based on elliptic curve cryptography (ECC) is proposed. It adds an XML Web services security component to an existing virtual private network (VPN) gateway to provide integrated security solution for securing both XML Web services and traditional network-based applications. Both the XML Web services security component and the VPN server on the gateway utilize the same digital ECC key. The XML Web services security component is built with Java packages of XML security, SOAP message security, ECC algorithms and other supporting functions, based on JDK 1.5.0.