Research on Trust-Authorization-Based Access Control Model for Web Services

The paper proposes a dynamic access control model for Web services that based on the trust-authorization -WS-TABAC model. A simple evaluation algorithm about trust is defined, which can calculate the trust degree of users easily. In WS-TABAC model, part or complete privileges can be achieved through the mapping relations defined between trust and authorization. Theoretical analysis and examples demonstrate that this model can better grant appropriate access privileges for different requestors and satisfy their need than the traditional access control.