Session authentication protocol for Web services

Author

Hada, Satoshi ; Maruyama, Hiroshi

Author_Institution

Tokyo Res. Lab., IBM Res., Kanagawa, Japan

fYear

2002

fDate

2002

Firstpage

158

Lastpage

165

Abstract

The recent development of Web services allows composition of a business flow by combining business processes provided by separate business via the Internet. One instance of a business flow can be executed by multiple service instances of the Web services of the participating business entities. At the same time, one business entity may have multiple services and service instances serving many different customers simultaneously. To establish trust relationships among these service instances, a new set of security protocols is necessary. We present a design for a session-oriented, multi-party authentication protocol based on standard Web service technologies such as SOAP, XML-Signature/Encryption, and SOAP-DSIG. The protocol consists of a message authentication protocol and a session management protocol

Keywords

Internet; business data processing; information resources; message authentication; protocols; Internet; SOAP; SOAP-DSIG; Web services; XML-Signature/Encryption; business entities; business flow; business processes; message authentication protocol; multiple service instances; security protocols; session authentication protocol; session management protocol; session-oriented multi-party authentication protocol; standard Web service technologies; trust relationships; Business communication; Companies; Cryptography; Laboratories; Message authentication; Proposals; Security; Simple object access protocol; Web and internet services; Web services;

fLanguage

English

Publisher

ieee

Conference_Titel

Applications and the Internet (SAINT) Workshops, 2002. Proceedings. 2002 Symposium on

Conference_Location

Nara

Print_ISBN

0-7695-1450-2

Type

conf

DOI

10.1109/SAINTW.2002.994566

Filename

994566