In order to solve the problem of authentication in Web services,the key exchange mechanism of Secure Remote Password-6(SRP-6) is analyzed,and a new authentication and key exchange scheme named SRP-over-SOAP is proposed.

• 针对Web服务中身份认证的问题；分析了SRP-6(Secure Remote Password-6)协议的密钥交换机制；提出了一种基于简单对象访问协议(SOAP)和SRP-6协议的认证与密钥交换方案(SRP-over-SOAP).