A new colligation security model of Web services based on SOAP message was designed

and two new function modules were added in the model.Web services security platform（WSSP） which was used to create a pair of manager private key

digital certificate and the authentication of identity;SOAP message security agent（SMSA） was used to ensure the security of Web services message.In the end

we actualized the new model by some tool package which was in existence

and did some security testing for the model in a idiographic system.The result of testing indicated that the SOAP message was encrypted

and the private key and the digital certificate was conferred and managed.It ensured the Web services working in a safety environment.