A Context Based Dynamic Access Control Model for Web Service

Web service is a new service-oriented computing paradigm which poses the unique security challenges due to its inherent heterogeneity and highly dynamic nature. A key challenge in Web service security is the design of effective access control schemas. However, traditional role-based access control (RBAC) model can not meet the dynamic and context sensitivity features of Web service demands. In this paper, we propose a context based dynamic role based access control model (CDACM) for Web service. Our approach grants and adapts permissions to users based on a set of contextual information collected from environments of the system and users. The model can consummate the privilege management for Web services access control, effectively enhance the security for Web services applications and produce more perfect mechanism of access control for Web services.