ACCESS CONTROL POLICY COMPOSITION FOR WS-BPEL

Chen Jianfei,Han Weili
DOI: https://doi.org/10.3969/j.issn.1000-386X.2012.03.052
2012-01-01
Abstract:In Web Service composition,the access control policies are usually defined by external sub-services for protecting safe use of resources,while in composite scripts there are the complex control logic structure as well.These two factors make it extremely complicated for a system security administrator to specify the access control policies for composite services.In this paper we propose a condition-based access control policy model and the related policy composition algebra,and map the control structures familiar in WS-BPEL to corresponding policy composition expression,then construct the access control policies of the composite service based on the composition of access control policies of external sub-services.Finally,we design a prototype to depict the total process of policy composition.
What problem does this paper attempt to address?