Interactive access control for web services

IFIP Advances in Information and Communication Technology

Volumn 147, Issue , 2004, Pages 151-166

  Koshutanski, Hristo ^a   Massaeci, Fabio ^a  

^a Dip di Informat ica e Telecomunicazioni Univ di Trenio   (Italy)

Author keywords

Business processes; Credential based systems; Interactive access cont rol; Internet comput ing; Logics for access control; Web services

Indexed keywords

ACCESS CONTROL; WEBSITES;

ACCESS CONTROL MECHANISM; BUSINESS PARTNERS; BUSINESS PROCESS; CREDENTIAL-BASED; CROSS-ORGANIZATIONAL; ENTERPRISE INTEGRATION; INTERACTIVE ACCESS CONT ROL; LOGICAL FRAMEWORKS;

WEB SERVICES;

EID: 84902459113     PISSN: 18684238     EISSN: None     Source Type: Book Series    
DOI: 10.1007/1-4020-8143-x_10     Document Type: Conference Paper

References (19)

1. APT, K. Logic programming. In Handbook of Theoretical Computer Science,.1. van Leeuwen, Ed. Elsevier, 1990.
2. ATLURI, V., CHUN, S. A., and MAZZOLENI, P. A Chinese wall security model for decentralized workftow systems. In Proceedings of the 8th ACM conference on Computer and Communications Security (2001), ACM Press, pp. 48-57.
3. BERTINO, E., FERRARI, E., and ATLURI, V. The specification and enforcement of authorization constraints in workftow management systems. ACM Transactions on Information and System Security (TISSEC) 2, 1 (1999),65-104.
4. BONATTI, P., and SAMARATI, P. A unified framework for regulating access and information release on the web. Journal of Computer Security 10,3 (2002), 241-272.
5. CLARKE, D., Ellen, J.-E., ELLISON, C., FREDETTE, M., MORCOS, A., and RIVEST, R. L. Certificate chain discovery in SPKIjSDSI. Journal of Computer Security 9, 4 (2001), 285-322.
6. DAS, S. Deductive Databases and Logic Progmmming. Addison-Wesley, Reading, MA,1992.
7. DE CAPITANI Di VIMERCATI, S., and SAMARATI, P. Access control: Policies, models, and mechanism. In Foundations of Security Analysis and Design Tuterial Lectures, R. Focardi and F. Gorrieri, Eds., vol. 2171 of LNCS. Springer Verlag Press, 2001.
8. ELLISON, C., FRANTz, B., LAMPSON, B., RIVEST, R., THOMAS, B. M., and YLONEN, T. SPKI Certificate Theory, September 1999. IETF RFC 2693.
9. GELFOND, M., and LIFSCHITZ, V. The stable model semantics for logic programming. In Proceedings 01 the Fijth. Int ernational Conjerence on Logic Programming (ICLP'88) (1988), R. Kowalski and K. Bowen, Eds., MIT-Press, pp. 1070-1080.
10. GEORGAKOPOULOS, D., HORNICK, M. F., and SIlETIl, A. P. An overview of workflow management: From process modeling to workflow automation infrastructure. Distributed and Parallel Databases 3, 2 (April 1995), 119-153.
11. KANG, M. H., PARK, J. S., and FROSCHER, J. N. Access control mechanisms for inter-organizational workflow. In Proeeedings 01 the Sixth ACM Symposium on Aeeess eontrol models and teehnologies (2001), ACM Press, pp. 66-74.
12. KOSHUTANSKI, H., and MASSACCI, F. An access control framework for business processes for Web services. In Proceedings 01 the 2003 ACM uiorkshop on XML security (Fairfax, VA, October 2003), ACM Press.
13. KOSHUTANSKI, H., and MASSACCI, F. A logical model for security of Web services. Tech. Rep. 111' TR-1O/2003, First International Workshop on Formal Aspects of Security and Trust (FAST), Istituto di Informatica e Telernatica, Pisa, Italy, September 2003. Editors: Theo Dimitrakos and Fabio Martinelli.
14. LEONE, N., PFEIFER, G., et al. The DLV system. In the 8theuropean Conference on Artificial Intelligenee (JELlA) (September 2002), vol. 2424 of Lecture Notes in Computer- Seien ce, Springer, pp. 537-540.
15. LI, N., GROSOF, B. N., and FEIGENBAUM, J. Delegation logic: A logic-based approach to distributed authorization. ACM Transactions on Information and System Security (TISSEC) 6, 1 (2003), 128-171.
16. LI, N., WINSBOROUGH, W. H., and MITCHELL, J. C. Distributed credential chain discovery in trust management. Journal 01 Computer Security 11, 1 (February 2003), 35-86.
17. NIEMELÄ, I., SIMONS, P., and SOININEN, T. Stable model semantics ofweight constraint rules. In Proceedings 01 the Fifth. International Conference on Logie Programming and Nonmonotonie Reasoning (December 1999), Springer-Verlag.
18. WEEKS, S. Understanding trust management systems. In IEEE SS&P-2001 (2001), IEEE Press.
19. Yu, T., WINSLETT, M., and SEAMONS, K. E. Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation. ACM Transactions on Information and System Security (TISSEC) 6, 1 (2003), 1-42.