Authors:
Weider D. Yu
and
Archana Mansukhani
Affiliation:
San Jose State University, United States
Keyword(s):
Web Services, authorization layer, security, inference engine, reusability, Service Oriented Architecture (SOA), expert system rules.
Related
Ontology
Subjects/Areas/Topics:
Data and Application Security and Privacy
;
Data Engineering
;
Data Privacy and Security
;
Databases and Data Security
;
e-Business
;
e-Commerce Security and Reliability Issues
;
Enterprise Information Systems
;
Enterprise Software Technologies
;
Global Communication Information Systems and Services
;
Information and Systems Security
;
Multimedia
;
Multimedia Signal Processing
;
Software Engineering
;
Speech Recognition
;
Telecommunications
;
Web and Mobile Business Systems and Services
;
Web Technologies and Web Services
Abstract:
Web services are a new way of thinking in distributed computing. They are an important step towards service-oriented architecture (SOA). Web services are used to obtain service in an open, platform independent way. Recent focus on web services has been in the area of security, which is an ongoing concern in many areas and is very pertinent to web services technology. This paper describes the design of a reusable authorization layer for web services software. This layer resides separate from the web services themselves and uses a rule based inference engine for determining authorization and access rights. It also uses different types of access control to formulate feature-rich rules.