Abstract: With the development and application of Web service technology，the Web security issues are increasingly prominent.It is proposed a layer security model and security mechanism to implement this model based on the EAP-SAKE for the Web.This model has the advantages of flexibility and extensibility，reduces the complexity of the system，and provides the various keys in different layers.It satisfies the security requirement of the Web service.

Key words: layered model, EAP-SKAE, key, Web security

摘要： 随着Web服务技术的应用与发展，Web安全问题日益突出。针对Web服务应用模式，提出了一种分层Web安全模型，以及基于EAP-SAKE的实现该模型的安全机制。该模型具有灵活性和可扩展性，降低了系统的复杂性，并提供了不同层次的密钥以供使用，满足了Web服务的安全需求。

关键词: 分层模型, EAP-SAKE, 密钥, Web安全