In this paper, we analyze the SRP protocol and propose an authertixation and key exchange scheme which is based on SRP-6 and SOAP (SRP-over-SOAP). As far as we know, this is the first implementation of SRP-6 over SOAP protocol.

• 本文分析了SRP协议的密钥交换机制,提出了一种基于SOPA和SRP-6协议的密钥交换与认证方案SRP-over-SOAP,并将该方案用于Web Service,实现了服务器和客户机间的双向身份认证。