A Swift-Trust-Based Access Control in Virtual Temporary Team of Web Service
Xiaoning Ma, Chao Xu · IC3T '12 Proceedings of the 2012 International Conference on Convergence Computer Technology · 2012
The web service security standards of OASIS can not support trust evaluation and authorization decision-making based on trust. In this paper, in order to resolve access control and authorization in virtual temporary team of web service, a swift-trust-based access control for web service (WS-STBAC) is designed based on XACML. WS-STBAC is a kind of middleware like authentication center, and composed of three parts: policy management, trust value computing, and decision-making of authorization. Receiving datum about trust computing from providers, WS-STBAC computes trust value of requestors. And based on policy, WS-STBAC decides whether to give requestors permission, instead of providers.