On Similarities between SOA-Based Web Service and Smart Card Application for Ease of Understanding and Securing the Former

This paper is to leverage familiarity with smart card application, i.e. understanding and practical experiences of implementing trustworthy smart card application, to uncover secret veil surrounding the SOA-Based Web Services, and further develop and implement effective strategies for achieving trustworthy Web Services. Aspects being compared, of smart card application and SOA-Based Web Services, include architectures, transmission models, needed security services, and essentials of achieving trustworthy applications. At last, the contemporary strategy, i.e. WS-Security, are introduced and explained for achieving trustworthy SOA-Based Web Services. Especially, its token services for attestation & authorization, and its cryptographic services for data confidentiality & integrity are detailed.