Title :
Authorization service for Web services and its implementation
Author :
Indrakanti, Sarath ; Varadharajan, Vijay ; Hitchens, Michael
Author_Institution :
Dept. of Comput., Macquarie Univ., Sydney, NSW, Australia
Abstract :
In this paper, we introduce the authorization issues for Web Services. We introduce the authorization service provided by Microsoft® .NET MyServices and then briefly describe our proposed modifications and extensions to the authorization service. We discuss the application of the extended authorization model to a healthcare system built using Web Services. We used the XML access control language (XACL) to specify policies in XML and control access to the patient records stored in XML format. We then evaluated the suitability of XACL as an authorization policy language for Web Services.
Keywords :
Internet; XML; authorisation; health care; medical information systems; network operating systems; Microsoft .NET MyServices; Web services; XACL; XML access control language; XML format; authorization model; authorization policy language; authorization service; data security; healthcare system; patient records; policy specification; Access control; Authentication; Authorization; Information management; Large-scale systems; Medical services; Security; Service oriented architecture; Web services; XML;
Conference_Titel :
Web Services, 2004. Proceedings. IEEE International Conference on
Print_ISBN :
0-7695-2167-3
DOI :
10.1109/ICWS.2004.1314814
