An access control framework for web services

dc.contributor.authorCoetzee, Marijke
dc.contributor.authorEloff, Jan H.P.
dc.date.accessioned2007-03-13T15:24:44Z
dc.date.available2007-03-13T15:24:44Z
dc.date.issued2005
dc.description.abstractPurpose – To define a framework for access control for virtual applications, enabled through web services technologies. The framework supports the loosely coupled manner in which web services are shared between partners. Design/methodology/approach – A background discussion on relevant literature, with an example is used to illustrate the problem that exists. To enable access control composition, an extension is proposed to authorisation specification language, together with publication of access control requirements of a web service provider. Findings – The framework shows that loosely coupled access control can be made possible by making use of the standard manner in which messages are communicated in XML, and by composing assertions with the access control policy of the provider in a consistent manner. Access to web service methods is only granted if permission can be derived for it, where the derivation step forms a formal proof. Research limitations/implications – A basic framework has been defined. An architecture to support it must be defined. Only a very basic level of access control composition has been illustrated. Practical implications – The publication of access control requirements in standards such as WS-Policy can be considered. Originality/value – This paper offers a practical approach to address access control for web services.en
dc.description.departmentComputer Science
dc.description.sponsorshipThe financial assistance of the Department of Labour (DoL) towards this research is hereby acknowledged.en
dc.format.extent261719 bytes
dc.format.mimetypeapplication/pdf
dc.identifier.citationCoetzee, M & Eloff, JHP 2005, ‘An access control framework for web services’, Information Management & Computer Security, vol. 13, no. 1, pp. 29-38. [http://www.emeraldinsight.com/info/journals/imcs/imcs.jsp]en
dc.identifier.issn0968-5227
dc.identifier.urihttp://hdl.handle.net/2263/1880
dc.language.isoenen
dc.publisherEmeralden
dc.rightsEmeralden
dc.subjectWorldwide weben
dc.subjectProgramming languagesen
dc.subjectTrusten
dc.titleAn access control framework for web servicesen
dc.typePostprint Articleen

Files

Original bundle

Now showing 1 - 1 of 1
Loading...
Thumbnail Image
Name:
Coetzee_Access(2005).pdf
Size:
255.58 KB
Format:
Adobe Portable Document Format

License bundle

Now showing 1 - 1 of 1
Loading...
Thumbnail Image
Name:
license.txt
Size:
2.39 KB
Format:
Item-specific license agreed upon to submission
Description: