Towards security and privacy in dynamic web service composition

Web services composition has been an active area of Service-oriented computing research. Although it has been profoundly investigated, security and privacy issues have not been more explored. The contribution of this paper deals with these issues by proposing an approach to provide privacy-aware and secure web service composition at runtime. The formalization of both functional and security requirements are based on Finite State Automaton. In addition and in order to protect sensitive data we used Shamir´s secret sharing algorithm among Multi-Clouds architecture. A Patient Health Record case study and an implementation is also presented to validate our suggested approach.