An attribute-based access control model for web services

Parallel and Distributed Computing, Applications and Technologies, PDCAT Proceedings

Volumn , Issue , 2006, Pages 74-79

  Shen, Hai Bo ^a   Hong, Fan ^a  

^a HUAZHONG UNIVERSITY OF SCIENCE AND TECHNOLOGY   (China)

Author keywords

Attribute based access control; Automated trust negotiation; Web services; XACML

Indexed keywords

ACCESS CONTROL; MATHEMATICAL MODELS; PROBLEM SOLVING;

ATTRIBUTE-BASED ACCESS CONTROL; AUTOMATED TRUST NEGOTIATION;

WEB SERVICES;

EID: 38949168454     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/PDCAT.2006.28     Document Type: Conference Paper

References (18)

1. World Wide Web Consortium. Web service. http://www.w3.org/2002/ws
2. Jericho Systems Corporation White Paper, "Putting Trust to Work". http://www.jerichosystems.com/Support/Downloads/ES_PKI_WhitePaper. pdf
3. W.Winsborough, K.Seamons, and V.Jones, "Automated Trust Negotiation", DARPA Information Survivablity Conference and Exposition, Hilton Head, January 2000.
4. P. Bonatt, and P. Samarati, "A unified framework forregulating access and information release on the Web", Journal of Computer Security, vol. 10, n. 3, 2002, pp. 241-272
5. N. Li, and J.C. Mitchell, "RT: A Role-based Trust-management Framework", In DARPA Information Survivability Conference and Exposition (DISCEX), Washington, D.C., April 2003.
6. E Yuan, and J Tong. "Attribute Based Access Control (ABAC) for Web Services", In proceedings of the IEEE Conference on Web Services (ICWS'05), Orlando Florida, USA. July 2005
7. Simon Godik, Tim Moses, et al, "extensible Access Control Markup Language (XACML) Version 1.0", OASIS Standard, February 18th, 2003
8. S. Farrell, and R. Housley, "An Internet Attribute Certificate Profile for Authorization", http://www.ietf.org/rfc/rfc3281.txt, April 2002. IETF, RFC 3281 (Standards Track).
9. OASIS Standard. Security Assertion Markup Language (SAML)V1.1, October, 2003. http://www.oasis-open.org/committees/security/docs/cs-sstc-core-01.pdf.
10. Simple Object Access Protocol (SOAP) V 1.1. May, 2000. http://www.w3.org/TR/2000/NOTE-SOAP-20000508
11. M.Winslett, T.Yu, K.E.Seamons, et al. Negotiating Trust on the Web. IEEE Internet Computing, Vol.6, No.6, November/December 2002, pp. 30-37.
12. Web Services Security (WS-Security) Version 1.0, April 2002. http://msdn.microsoft.com/ws/2002/04/Security.
13. E. Damiani, S.D.C di Vimercati, S. Paraboschi, and P. Samarati, "Fine grained access control for SOAP e-services", In Proceedings of 10th International Conference on World Wide Web (WWW), Hong Kong, 2001, pp. 504-513.
14. D.F. Ferraiolo, R. Sandhu, S. Gavrila, et al., "Proposed NIST standard for role-based access control", ACM Transactions on Information and System Security (TISSEC), Volume 4, Issue 3, August 2001.
15. R. Bhatti, E. Bertino, and A. Ghafoor, "A Trust-based Context-Aware Access Control Model for Web Services", In Proceedings of the IEEE International Conference on Web Services (ICWS'04), San Diego, California, USA, June 6-9, 2004.
16. Xu F., Xie J., Huang H., and Xie L., "Context-Aware Role-Based Access Control Model for Web Services", In Proceedings of International Workshop on Information Security and Survivability for Grid (GISS '2004), Wuhan, China, October 21-24, 2004.
17. Liu M., GUO H Q., and SU J D., "An Attribute and Role-Based Access Control Model for Web Services", In proceedings of The Fourth International Conference on Machine Learning and Cybernetics, Guangzhou, China, 18-21 August 2005.
18. W.H.Winsborough and J.Jacobs, "Automated Trust Negotiation in Attribute-based Access Control", In Proceedings of the DARPA Information Survivability Conference and Exposition (DISCEX'03), April, 2003.