Abstract:Business process describes a set of services that span enterprise boundaries and are provided by enterprises that see each other as partners. Web services is widely accepted and adopted to construct business process. Web services are built in exposed environment and open to security threats. When a web service contained in a business process is authorized to illegal users, it will cause economic loss of the service provider. Although there exist some standards for security of Web services and access control for services in distributed systems are well studied, there is a lack of comprehensive approach in access control for web services, especially in business process. In this paper, an extended RBAC model, called WS-RBAC, is proposed to secure web services in business process. The model takes web services in business process as protected objects and extends the classical RBAC model. Next, The software architecture of WS-RABC is presented. This paper also presents how to specify business process in the model and the authorization constraints of WS-RBAC based on WS-Policy.

Security Access Control Scheme for the Web Service Based on Property

Research on security extensions based on Java 2 security architecture

Secure digital watermark scheme based on Web Services

Role-Based Access Control System for Web Services

A Security Model Design in Web Service Environment

Construction of security architecture of web services based EAI

Access Control Model Based on XACML and SAML in Web Services

The Simple Object Access Protocol In Web Services Architecture

Dynamic Security Access Control Model Based on System Reliability

Research on Information Security Model and Security System Design

A Survey on Access Control for Web Services

WEB SERVICES SECURITY MECHANISM AND SECURITY TECHNOLOGY

A Web Services Security Policy Description Model

An Access Control Model for Web Services in Business Process

Fine-grained Security Model of Multi-agent Communication with XML Specifications

A Resolvment of the Web Security Based on B/S Structure

Security Policy Approach for Semantic-Based Web Technology

Supporting Security in Dynamic Cooperation of Cross-Enterprise Services

Integrative Security Management for Web-Based Enterprise Applications

Security Protocol of JMS-Based Message-Oriented Middleware

WEB SERVICE BASED AUTHORIZATION ACCESS CONTROL METHOD