Appendix References

References
H
ere is a selection of references that you will find useful for learning more about SOA, the
WS-I Basic Profile, the WS- specifications, and Web Services Enhancements. The references
are broken out by topic. Note that Web services standards and specifications evolve quickly,
so some of the specification references that are listed here will be superseded in future
months by others.
Service-Oriented Architecture (General)
“Application Architecture for .NET: Designing Applications and Services”
MSDN white paper (December 2002)
/>distapp.asp
“Building Interoperable Web Services: WS-I Basic Profile 1.0”
MSDN white paper (August 2003)
/>wsi-bp_msdn_landingpage.asp
“The Evolution of Web Services—Part 2”
Adnan Masood
White paper (September 2003)
/>“Java Modeling: A UML Workbook, Part 4”
Granville Miller
White paper (June 2002)
/>225
APPENDIX
701xAppx.qxd 7/14/06 5:41 PM Page 225
XML Schemas and SOAP
“Understanding SOAP”
Aaron Skonnard
MSDN white paper (March 2003)
/>understandsoap.asp
“XML Schemas and the XML Designer”
MSDN article
/>vboricreatingschemas.asp

“A Quick Guide to XML Schema”
Aaron Skonnard
MSDN Magazine (April 2002)
/>“Place XML Message Design Ahead of Schema Planning to Improve Web Service
Interoperability”
Yasser Shohoud
MSDN Magazine (December 2002)
/>“RPC/Literal and Freedom of Choice”
Yasser Shohoud
MSDN white paper (April 2003)
/>rpc_literal.asp
“Web Services Encoding and More”
Aaron Skonnard
MSDN Magazine (May 2003)
/>“SOAP Is Not a Remote Procedure Call”
Ingo Rammer’s Architecture Briefings (October 2003)
/>SoapIsNotARemoteProcedureCall.pdf
“Increase Your App’s Reach Using WSDL to Combine Multiple Web Services”
Gerrard Lindsay
MSDN Magazine (March 2005)
/>APPENDIX
■
REFERENCES226
701xAppx.qxd 7/14/06 5:41 PM Page 226
WS- Specifications (General)
Resources for developers and links to original standards and specifications documents
IBM developerWorks
/>“Secure, Reliable, Transacted Web Services: Architecture and Composition”
Donald F. Ferguson (IBM), Tony Storey (IBM), Brad Lovering (Microsoft),
John Shewchuk (Microsoft)

MSDN white paper (September 2003)
/>advancedwebservices/default.aspx?pull=/library/en-us/dnwebsrv/
html/wsoverview.asp
“Compare Web Service Security Metrics”
Roger Jennings (OakLeaf Systems)
XML and Web Services Magazine (October 2002)
/>default.aspx
“Installing Certificates for WSDK X.509 Digital Signing and Encryption”
Roger Jennings (OakLeaf Systems)
XML and Web Services Magazine (October 2002)
/>sidebar1.aspx
Web Services Enhancements 2.0 and 3.0 (General)
“What’s New in Web Services Enhancements 3.0”
Mark Fussell
MSDN white paper (November 2005)
/>newwse3.asp
“Programming with Web Services Enhancements 2.0”
Matt Powell
MSDN white paper (May 2004)
/>programwse2.asp
APPENDIX
■
REFERENCES 227
701xAppx.qxd 7/14/06 5:41 PM Page 227
WS-Security
“WSE Security: Protect Your Web Services Through the Extensible Policy Framework in
WSE 3.0”
Tomasz Janczuk
MSDN Magazine (February 2006)
/>Web Services Security (WS-Security) standards documents

OASIS
/>“Web Services Security: SOAP Message Security 1.0 (WS-Security 2004)”
OASIS Standard 200401, March 2004

➥
security-1.0.pdf
“Understanding WS-Security”
Scott Seely
MSDN white paper (October 2002)
/>advancedwebservices/default.aspx?pull=/library/en-us/dnwssecur/
html/understw.asp
“WS-Security Drilldown in Web Services Enhancements 2.0”
Don Smith
MSDN white paper (August 2004)
/>wssecdrill.asp
(Note: This reference is also listed in the “WS-Secure Conversation” section of this appendix.)
“WS-Security Authentication and Digital Signatures with Web Services Enhancements”
Matt Powell
MSDN white paper (December 2002)
/>wssecauthwse.asp
“Building Secure Web Services”
J.D. Meier, Alex Mackman, Michael Dunner, Srinath Vasireddy, Ray Escamilla, and
Anandha Murukan
MSDN Patterns and Practices white paper, Chapter 12 (June 2003, revised January 2006)
/>THCMCh12.asp
APPENDIX
■
REFERENCES228
701xAppx.qxd 7/14/06 5:41 PM Page 228
“Encrypting SOAP Messages Using Web Services Enhancements”

Jeannine Hall Gailey
MSDN white paper (December 2002)
/>wseencryption.asp
“Web Services Security: Moving Up the Stack”
Maryann Hondo, David Melgar, and Anthony Nadalin
IBM developerWorks white paper (December 2002)
/>“Web Services Security Username Token Profile”
OASIS working draft (January 2003)
/>“Web Services Security Kerberos Binding”
Giovanni Della-Libera (Microsoft), Brendan Dixon (Microsoft), Praerit Garg (Microsoft),
Maryann Hondo (IBM), Chris Kaler (Microsoft), Hiroshi Maruyama (IBM),
Anthony Nadalin (IBM), and Nataraj Nagaratnam (IBM)
MSDN white paper (December 2003)
/>ws-security-kerberos.asp
“Security Features in WSE 3.0”
Keith Brown
MSDN Magazine (November 2005)
/>“Web Service Security: Scenarios, Patterns, and Implementation Guidance for Web Services
Enhancements (WSE) 3.0”
Jason Hogg (Microsoft), Don Smith (Microsoft), Fred Chong (Microsoft), Dwayne Taylor
(RDA Corporation), Lonnie Wall (RDA Corporation), and Paul Slater (Wadeware LLC)
MSDN Patterns and Practices guide (December 2005)
/>wssp.asp
Web Service Security: Scenarios, Patterns, and Implementation Guidance home page
Microsoft Patterns and Practices community workspace
/>67f659f6-9457-4860-80ff-0535dffed5e6
APPENDIX
■
REFERENCES 229
701xAppx.qxd 7/14/06 5:41 PM Page 229

“Security for SOA and Web Services”
Dipak Chopra
SAP Developer Network
/>webservices/Security%20for%20SOA%20and%20Web%20Services.article
“Windows 2000 Kerberos Authentication”
Microsoft TechNet
/>kerberos.mspx
WS-Policy
“Web Services Policy Framework”
IBM developerWorks specification (May 2003)
/>“Understanding WS-Policy”
Aaron Skonnard
MSDN white paper (August 2003)
/>understwspol.asp
“Web Services Policy Assertions Language (WS-Policy Assertions)”
Don Box (Microsoft), Maryann Hondo (IBM), Chris Kaler (Microsoft), Hiroshi Maruyama
(IBM), Anthony Nadalin (IBM), Nataraj Nagaratnam (IBM), Paul Patrick (BEA), Claus von
Riegen (SAP), and John Shewchuk (Microsoft)
MSDN white paper (May 2003)
/>ws-policyassertions.asp
“Using Role-Based Security with Web Services Enhancements 2.0”
Ingo Rammer
MSDN white paper (September 2003)
/>wserolebasedsec.asp
WS-Secure Conversation
“Web Services Secure Conversation Language”
IBM developerWorks specification (May 2004, updated February 2005)
/>APPENDIX
■
REFERENCES230

701xAppx.qxd 7/14/06 5:41 PM Page 230
“Web Services Trust Language”
IBM developerWorks specification (May 2004, updated February 2005)
/>“WS-Security Drilldown in Web Services Enhancements 2.0”
Don Smith
MSDN white paper (August 2004)
/>wssecdrill.asp
(Note: This reference is also listed in the “WS-Security” section of this appendix.)
“Managing Security Context Tokens in a Web Farm”
Chris Keyser
MSDN white paper (November 2004)
/>sctinfarm.asp
WS-Addressing
“Web Services Addressing”
IBM developerWorks specification (March 2004, updated August 2004)
/>WS-Messaging
“Asynchronous Operations and Web Services, Part 1: A Primer on Asynchronous Transactions”
Holt Adams
IBM developerWorks white paper (April 2002)
/>“Asynchronous Operations and Web Services, Part 2: Programming Patterns to Build
Asynchronous Web Services”
Holt Adams
IBM developerWorks white paper (June 2002)
/>“Introducing the Web Services Enhancements 2.0 Messaging API”
Aaron Skonnard
MSDN Magazine (September 2003)
/>APPENDIX
■
REFERENCES 231
701xAppx.qxd 7/14/06 5:41 PM Page 231

WS-Routing and WS-Referral
“Routing SOAP Messages with Web Services Enhancements 1.0”
Aaron Skonnard
MSDN white paper (January 2003)
/>routsoapwse.asp
WS-Reliable Messaging
“Web Services Reliable Messaging”
IBM developerWorks specification (March 2004, updated February 2005)
/>“Reliable Message Delivery in a Web Services World: A Proposed Architecture and Roadmap”
IBM Corporation and Microsoft Corporation
MSDN white paper (March 2003)
/>default.aspx?pull=/library/en-us/dnglobspec/html/ws-rm-exec-summary.asp
Windows Communication Foundation (Indigo)
“Introduction to Building Windows Communication Foundation Services”
Clemens Vasters
MSDN white paper (September 2005)
/>dnlong/html/introtowcf.asp
Windows Communication Foundation articles and white papers
Resources page
/>“A Guide to Developing and Running Connected Systems with Indigo”
Don Box
MSDN Magazine (January 2004)
/>“Creating Indigo Applications with the PDC Release of Visual Studio .NET Whidbey”
Yasser Shohoud
MSDN white paper (January 2004)
/>indigolingo01062004.asp
APPENDIX
■
REFERENCES232
701xAppx.qxd 7/14/06 5:41 PM Page 232