Role-Based Access Control System for Web Services

Authors:
Feng Xu;Guoyuan Lin;Hao Huang;Li Xie
Affiliations:
Nanjing University;China University of Mining & Technology;Nanjing University;Nanjing University
Venue:
CIT '04 Proceedings of the The Fourth International Conference on Computer and Information Technology
Year:
2004

Citing 0
Cited 5

A delegation framework for federated identity management

Proceedings of the 2005 workshop on Digital identity management
An efficient and transparent transaction management based on the data workflow of HVEM DataGrid

CLADE '08 Proceedings of the 6th international workshop on Challenges of large applications in distributed environments
Security Policy Integration and Conflict Reconciliation for Collaborations among Organizations in Ubiquitous Computing Environments

UIC '08 Proceedings of the 5th international conference on Ubiquitous Intelligence and Computing
Protecting critical infrastructures while preserving each organization's autonomy

ICDCIT'11 Proceedings of the 7th international conference on Distributed computing and internet technology
A service-centric approach to a parameterized RBAC service

ACOS'06 Proceedings of the 5th WSEAS international conference on Applied computer science

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper first briefly reviews the state of the security technology research and access control in the Web Services environment, and then presents a service-orient role-based access control model and security architecture model for Web Services. In this Security Architecture model, SOAP Proxy is employed to enforce access control for Web Services and security mechanisms are separated from the business logic. In this paper, a new technology is presented to implement the RBAC on the Web Services by designing the secure cookies and secure SOAP messages. Finally, the conclusion is given and the problems are pointed out, which should be resolved in further research.