IEEE International Conference on Services Computing (SCC 2007) (2007)
Salt Lake City, Utah, USA
July 9, 2007 to July 13, 2007
DOI Bookmark: http://doi.ieeecomputersociety.org/10.1109/SCC.2007.61
Lenin Singaravelu , Georgia Institute of Technology
Calton Pu , Georgia Institute of Technology
Web service composition introduces two research challenges to end-to-end integrity and confidentiality of information flow. First, component services need the ability to selectively read or modify information flows. Second, component web services may or may not be trusted by all participants in the same degree. Existing specifications such as WS-Security provide finegrained signatures and encryption for pair-wise interactions, but insufficient support for end-to-end security properties in open environments. Using an electronic prescription application, we illustrate the need for an enhanced framework for providing end-to-end security properties. We then describe a fine-grained, security framework, called WS-FESec, that leverages WSSecurity to support flexible preservation of end-to-end integrity and confidentiality in web service compositions. Finally, we discuss WS-FESec?s support for the lattice model of secure information flow and show how it can be employed to preserve end-to-end security properties in the electronic prescriptions application.
C. Pu and L. Singaravelu, "Fine-Grain, End-to-End Security for Web Service Compositions," IEEE International Conference on Services Computing (SCC 2007)(SCC), Salt Lake City, Utah, USA, 2007, pp. 212-219.