Towards Standards-Compliant Trust Negotiation for Web Services (Extended Version)

Lee, Adam J.; Winslett, Marianne

Permalink

https://hdl.handle.net/2142/11429 Copy

Description

Title

Towards Standards-Compliant Trust Negotiation for Web Services (Extended Version)

Author(s)

• Lee, Adam J.
• Winslett, Marianne

Issue Date

2008-03

Keyword(s)

computer security

Abstract

Web services are a powerful distributed computing abstraction in that they enable users to develop workflows that incorporate data and information processing services located in multiple organizational domains. Fully realizing the potential of this computing paradigm requires a flexible authorization mechanism that can function correctly without a priori knowledge of the users in the system. Trust negotiation has been proposed as a viable solution to this problem, but doing so within the framework provided by existing web services standards remains an unsolved problem. In this paper, we show how existing web services standards can be extended to enable fully standards-compliant support for trust negotiation. We also show that it is possible to compile trust negotiation policies specified using the WS-SecurityPolicy standard into a representation that is suitable for analysis by Clouseau, a highly-efficient trust negotiation policy compliance checker. Lastly, we show that the TrustBuilder2 framework for trust negotiation can be parameterized to act as a trust engine that can be used by the WS-Trust standard to facilitate these negotiations.

Type of Resource

text

Permalink

http://hdl.handle.net/2142/11429

Copyright and License Information

You are granted permission for the non-commercial reproduction, distribution, display, and performance of this technical report in any format, BUT this permission is only for a period of 45 (forty-five) days from the most recent time that you verified that this technical report is still available from the University of Illinois at Urbana-Champaign Computer Science Department under terms that include this permission. All other rights are reserved by the author(s).

Owning Collections