A Fine-Grained Access Control Model for Web Services

Authors:
E. Bertino;A. C. Squicciarini;D. Mevi
Affiliations:
Purdue University, West Lafayette;Universita' degli Studi di Milano, Italy;Universita' degli Studi di Milano, Italy
Venue:
SCC '04 Proceedings of the 2004 IEEE International Conference on Services Computing
Year:
2004

Citing 0
Cited 3

Ws-AC: A Fine Grained Access Control System for Web Services

World Wide Web
Authorization control in collaborative healthcare systems

Journal of Theoretical and Applied Electronic Commerce Research
Business Driven User Role Assignment: Nimble Adaptation of RBAC to Organizational Changes

International Journal of Information Security and Privacy

Quantified Score

Hi-index	0.00

Visualization

Abstract

The emerging Web service technology has enabled the development of Internet-based applications that integrate distributed and heterogeneous systems and processes which are owned by different organizations. However, while Web services are rapidly becoming a fundamental paradigm for the development of complex Web applications, several security issues still need to be addressed.Among the various open issues concerning security, an important issue is represented by the development of suitable access control models, able to restrict access to Web services to authorized users.In this paper we present an innovative access control model for Web services.The model is characterized by a number of key features, including identity attributes and service negotiation capabilities.We also discuss an architecture implementing the model and we propose the use of a certificate scheme able to support the exchange and verification of subject attributes.