Web Services Security Architectures Composition and Contract Design using RBAC
Journal Title: International Journal on Computer Science and Engineering - Year 2010, Vol 2, Issue 8
Abstract
Service Oriented Architecture’s Web Services authorization traditionally is done using common access control models like Role-Based Access Control. In thinking of a composite application that stitches together the capabilities of multiple services, any action in the composite app should ideally check the access control rules of all constituent services before initiating an action. The Web Services Access controls are categorized according to access control granularity and have two approaches: The first approach supports a egotiation-based attribute-based access control to Web Services with fine access granularity. The second approach is tailored to access control for conversation-based Web services and composite services; where in a Web Service is not considered as a set of independent operations and therefore access control must take such dependencies into account. During a Web Services invocation, a client interacts with the service, performing a sequence of operations in a particular order called conversation. In this paper, we want to propose strategies for analyzing and managing Role Based Access Control policies for designing Security Architectures for web services. We validate role-based access control with a case study, where in access decisions are based on the roles that individual users have as part of an organization. Users take on assigned roles. The process of defining roles should be based on a thorough analysis of how an organization operates and should include input from a wide spectrum of users in an organization. Access rights are grouped by role name, and the use of resources is restricted to individuals authorized to assume the associated role. For example, within a hospital system the role of doctor can include operations to perform diagnosis, prescribe medication, and order laboratory tests; and the role of researcher can be limited to gathering anonymous clinical information for studies. The use of roles to control access can be an effective means for developing and enforcing enterprise-specific security policies, and for streamlining the security management process. Under the RBAC framework, users are granted membership into roles based on their competencies and responsibilities in the organization. The operations that a user is permitted to perform are based on the user's role.
Authors and Affiliations
D. Shravani , Dr. P. Suresh Varma , Dr. B. Padmaja Rani , Dr. D. Sravan Kumar , M. Upendra Kumar
Keywords
Related Articles
- EP ID EP160497
- DOI -
- Views 106
- Downloads 0
Performance Of OLSR Routing Protocol Under Different Route Refresh Intervals In Ad Hoc Networks
An ad hoc wireless network consists of mobile terminals communicating with each other without the help of traditional infrastructure for communication. Optimized Link State Protocol (OLSR) is a proactive routing protoco...
Optimizing Hidden Markov Model for Failure Prediction– Comparison of Gaine’s optimization and Minimum message length Estimator
Computer systems are prone to failures. Failures are caused by faults that occur in a system. As faults are unknown and cannot be measured, they produce error messages on their detection. The approach presented here is t...
MRI Brain Image Tissue Segmentation analysis using Possibilistic Fuzzy C-means Method
In this paper, we analyzed the segmentation of MRI brain image into different tissue types on brain image using Possibilistic fuzzy c-means (PFCM) clustering. Application of this method to MRI brain image gives the bette...
ENERGY EFFICIENT DATA GATHERING SCHEME USING CROSS LAYER CLUSTER APPROACH FOR WIRELESS SENSOR NETWORKS
Recent advances in wireless communication technology and research in ad hoc wireless networks have made smart sensing a reality. A Wireless Sensor Networks (WSNs) is composed of a number of wireless sensor nodes which fo...
A Novel Routing Algorithm Based on Link Failure Localization for MANET
The routing in Mobile Ad hoc Network (MANET) is a critical task due to dynamic topology. Many routing protocols were proposed which are categorized as proactive and reactive routing protocols. Route maintenance is a grea...