An Agent-based Policy Aware Framework for Web Services Security

The security of Web services has become one of the important research topics about the application of Web services. In this paper, we propose an agent-based policy aware framework for Web services security. In this framework, a policy language called ReiT which is a declarative language based on the rules and ontologies is introduced. The non-structural knowledge is represented by rules and the structural temporal knowledge is represented by ontology. Moreover, we propose a mixed reasoning mechanism to evaluate the ReiT policy. The access control policy including the context of the user and Web services is evaluated by the reasoner. In addition, we present a policy aware BOID agent to authorize the access control of the Web services. And we implement the policy aware BOID agent by extending the JADE platform.