A system for interactive authorization for business processes for web services

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 3140, Issue , 2004, Pages 521-525

  Koshutanski, Hristo ^a   Massacci, Fabio ^a  

^a UNIVERSITY OF TRENTO   (Italy)

Author keywords

Business processes for web services; Credential based systems; Interactive authorizations; Web services

Indexed keywords

WEBSITES;

BPEL4WS; BUSINESS PARTNERS; BUSINESS PROCESS; CREDENTIAL-BASED; CROSS-ORGANIZATIONAL; INTERACTIVE AUTHORIZATIONS; VIRTUAL ORGANIZATION;

WEB SERVICES;

EID: 84944397711     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-27834-4_63     Document Type: Conference Paper

References (10)

1. Li, N., Mitchell, J.C., Winsborough, W.H.: Design of a role-based trustmanagement framework. In: Proc. of IEEE SS&P. (2002)
2. Kang, M.H., Park, J.S., Froscher, J.N.: Access control mechanisms for interorganizational workflow. In: Proc. of ACM SACMAT. (2001) 66–74
3. Bertino, E., et al.: The specification and enforcement of authorization constraints in workflow management systems. ACM TISSEC 2 (1999) 65–104
4. Atluri, V., Chun, S.A., Mazzoleni, P.: A Chinese wall security model for decentralized workflow systems. In: Proc. of ACM CCS. (2001) 48–57
5. Yu, T., Winslett, M., Seamons, K.E.: Supporting structured credentials and sensitive policies through interoperable strategies for automated trust negotiation. ACM TISSEC 6 (2003) 1–42
6. Koshutanski, H., Massacci, F.: An access control framework for business processes for Web services. In: Proc. of ACM Workshop on XML Security. (2003)
7. Koshutanski, H., Massacci, F.: Interactive access control for Web Services. In: the 19th IFIP Information Security Conference (SEC). (2004) (to appear).
8. Chadwick, D.W., Otenko, A.: The PERMIS X.509 role-based privilege management infrastructure. In: the 7th ACM SACMAT. (2002) 135–140
9. Li, N., Winsborough, W.H., Mitchell, J.C.: Distributed credential chain discovery in trust management. Journal of Computer Security 11 (2003) 35–86
10. Becker, M.Y., Sewell, P.: Cassandra: Flexible trust management, applied to electronic health records. In: Proceedings of the 17th IEEE Computer Security Foundations Workshop (CSFW). (2004) (to appear).