TY - GEN
T1 - A fine-grained access control model for Web services
AU - Bertino, E.
AU - Squicciarini, A. C.
AU - Mevi, D.
PY - 2004/10/11
Y1 - 2004/10/11
N2 - The emerging Web service technology has enabled the development of Internet-based applications that integrate distributed and heterogeneous systems and processes which are owned by different organizations. However, while Web services are rapidly becoming a fundamental paradigm for the development of complex Web applications, several security issues still need to be addressed. Among the various open issues concerning security, an important issue is represented by the development of suitable access control models, able to restrict access to Web services to authorized users. In this paper we present an innovative access control model for Web services. The model is characterized by a number of key features, including identity attributes and service negotiation capabilities. We also discuss an architecture implementing the model and we propose the use of a certificate scheme able to support the exchange and verification of subject attributes.
AB - The emerging Web service technology has enabled the development of Internet-based applications that integrate distributed and heterogeneous systems and processes which are owned by different organizations. However, while Web services are rapidly becoming a fundamental paradigm for the development of complex Web applications, several security issues still need to be addressed. Among the various open issues concerning security, an important issue is represented by the development of suitable access control models, able to restrict access to Web services to authorized users. In this paper we present an innovative access control model for Web services. The model is characterized by a number of key features, including identity attributes and service negotiation capabilities. We also discuss an architecture implementing the model and we propose the use of a certificate scheme able to support the exchange and verification of subject attributes.
UR - http://www.scopus.com/inward/record.url?scp=4644227527&partnerID=8YFLogxK
UR - http://www.scopus.com/inward/citedby.url?scp=4644227527&partnerID=8YFLogxK
U2 - 10.1109/RIDE.2004.1281700
DO - 10.1109/RIDE.2004.1281700
M3 - Conference contribution
AN - SCOPUS:4644227527
SN - 0769522254
SN - 9780769522258
T3 - Proceedings - 2004 IEEE International Conference on Services Computing, SCC 2004
SP - 33
EP - 40
BT - Proceedings - 2004 IEEE International Conference on Services Computing, SCC 2004
A2 - Zhang, L.J.
A2 - Li, M.
A2 - Sheth, A.P.
A2 - Jeffery, K.G.
T2 - Proceedings - 2004 IEEE International Conference on Services Computing, SCC 2004
Y2 - 15 September 2004 through 18 September 2004
ER -