Schema-Driven Security Filter Generation For Distributed Data Integration

With the prevalence of loosely coupled Web service composition in the service oriented infrastructure, distributed security management has become important to offer flexible Web security. In our project affiliated with NatureServe, we developed a XACML policy-oriented security system to provide trusted data service to 75 network partners in the Natural Heritage Program. In our model, a security filter based on a data integration schema is generated dynamically and applied to the returned document to satisfy the security constraints defined both by each partner and by the NatureServe service mediator. Challenges of resolving the policy conflicts in the distributed environment are addressed