Security Infrastructure for A Web Service Based Resource Management System
Yong Yan, Michael Goss, Dharmender Kumar · 2002
... this paper, we have designed and implemented a security infrastructure for a Web service model based global resource management system. In order to provide a secure shell around the global resource management system while keeping a simple Web access interface to the system, a Kerberos-like authentication system is built from the modification to the Kerberos model with a new set of authentication protocols while keeping the basic security mechanisms of the Kerberos. Our security infrastructure enforces Kerberos-like strong authentication and role-based access control. By encapsulating principals-to roles assignment into the service ticket, our system first seamlessly combines the Kerberos-like authentication with the role-based access control model. With the help of two security mechanisms: passport and service guard, transparent enforcement in the Web service messaging engine and the separation of security policy and security engine have been achieved so that our system can be easily extended and enhanced.