A security architectural approach for DPWS-based devices
José-Fernán Martínez-Ortega, M. Serrano López, Vicente Hernández, Kathlyn Jean-Marie, Ana B. García, Lourdes López, Cristina Herrera, Carlos-J Sánchez-Alarcos · 2008
The DPWS (Device Profile for Web Services) specification fosters the interoperability between Web Services implementations on devices with constrained resources and clients’ implementations with full Web Services capabilities. That profile specifies the minimal set of features that a device must satisfy to be Web Service compliant. It establishes a minimal security model for guaranteeing basic security services such as messages integrity, confidentiality and authentication of transactions source and destination. However, certain industrial domains involve important security challenges that have to be addressed following a complementary approach. This paper presents a security proposal for solving the problems pointed out before by means of a secure architectural approach and an extension to the existing DPWS security specification. This architecture has been developed in the framework of the SODA (Service Oriented Device Architecture) European project.