Action-Based Access Control for Web Services

Web services over the Internet are widely used nowadays. The problem of secure access to Web-based systems is of great importance naturally. Compared with the existing models, the action-based access control (ABAC) model is the most suitable to control the access on Web services. In this paper, the ABAC model is introduced. Then, the security architecture of ABAC for Web services is proposed. In the architecture, the action server manages the action information, the domain server determines the security rank of request resources, and the resource server storing the resources with different security ranks responses the request from the user. The cookie is extended with security properties.