This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
IEEE International Conference on Web Services (ICWS'04)
A Trust-based Context-Aware Access Control Model for Web-Services
San Diego, California
June 06-June 09
ISBN: 0-7695-2167-3
Rafae Bhatti, Purdue University, West Lafayette, IN
Elisa Bertino, Purdue University, West Lafayette, IN
Arif Ghafoor, Purdue University, West Lafayette, IN
A key challenge in Web services security is the design of effective access control schemes that can adequately meet the unique security challenges posed by the Web services paradigm. Despite the recent advances in Web based access control approaches applicable to Web services, there remain issues that impede the development of effective access control models for Web services environment. Amongst them are the lack of context-aware models for access control, and reliance on identity or capability-based access control schemes. In this paper, we motivate the design of an access control scheme that addresses these issues, and propose an extended, trust-enhanced version of our XML-based Role Based Access Control (X-RBAC) framework that incorporates context-based access control. We outline the configuration mechanism needed to apply our model to the Web services environment, and also describe the implementation architecture for the system.
Index Terms:
XML, Role-Based Access Control, Trust Management, Web-Services
Citation:
Rafae Bhatti, Elisa Bertino, Arif Ghafoor, "A Trust-based Context-Aware Access Control Model for Web-Services," icws, pp.184, IEEE International Conference on Web Services (ICWS'04), 2004
Usage of this product signifies your acceptance of the Terms of Use.