A Security Control Architecture for SOAP-Based Services

Today´s highly dynamic, distributed usage environments, need mechanisms to protect network resources against unauthorized access and unauthorized use. Current contributions in this area follow two main directions: a) users are known and thus service is granted on the basis of user´s identifications, user´s role, etc. b) users are unknown and thus service is granted on the basis of risk evaluation, caused by granting such a service. We deal with a case, where we do not care about the users´ identifications, but rather with local operating conditions of the services. We suggest the design of an architecture for the usage control of SOAP-based services, with dynamic usage restrictions specified only by a dedicated security module involved in the architecture. We present a case study to illustrate the work.