An authorization model for Web Services within SOA

One of the most significant difficulties with developing service-oriented architecture (SOA) concerns its security challenges. In particular, the authorization task is especially demanding because of the diverse access requirements within the various SOA environments, such as the business world, the academic setting and the industry atmosphere. In this paper, we propose a 4-attribute vector authorization model constructed in the form of an authorization service (AS). The proposed model is founded on the attribute-role based access control and contains an intelligent mining engine that facilitates the management of several authorization roles and provides flexibility to dynamically infer and assign the roles for a wide range of users and objects.