Authorization service for Web services and its implementation

Author

Indrakanti, Sarath ; Varadharajan, Vijay ; Hitchens, Michael

Author_Institution

Dept. of Comput., Macquarie Univ., Sydney, NSW, Australia

fYear

2004

fDate

6-9 July 2004

Firstpage

774

Lastpage

777

Abstract

In this paper, we introduce the authorization issues for Web Services. We introduce the authorization service provided by Microsoft® .NET MyServices and then briefly describe our proposed modifications and extensions to the authorization service. We discuss the application of the extended authorization model to a healthcare system built using Web Services. We used the XML access control language (XACL) to specify policies in XML and control access to the patient records stored in XML format. We then evaluated the suitability of XACL as an authorization policy language for Web Services.

Keywords

Internet; XML; authorisation; health care; medical information systems; network operating systems; Microsoft .NET MyServices; Web services; XACL; XML access control language; XML format; authorization model; authorization policy language; authorization service; data security; healthcare system; patient records; policy specification; Access control; Authentication; Authorization; Information management; Large-scale systems; Medical services; Security; Service oriented architecture; Web services; XML;

fLanguage

English

Publisher

ieee

Conference_Titel

Web Services, 2004. Proceedings. IEEE International Conference on

Print_ISBN

0-7695-2167-3

Type

conf

DOI

10.1109/ICWS.2004.1314814

Filename

1314814