Authorization Service for Web Services and its Application in a Health Care Domain

View Sample PDF

Author(s): Sarath Indrakanti (Macquarie University, Australia), Vijay Varadharajan (Macquarie University, Australia)and Michael Hitchens (Macquarie University, Australia)
Copyright: 2008
Pages: 27
Source title: Information Security and Ethics: Concepts, Methodologies, Tools, and Applications
Source Author(s)/Editor(s): Hamid Nemati (The University of North Carolina at Greensboro, USA)
DOI: 10.4018/978-1-59904-937-3.ch191

Keywords: Information Science Reference / Information Security & Privacy / IT Security and Ethics / Security & Forensics

Purchase

View Authorization Service for Web Services and its Application in a Health Care Domain on the publisher's website for pricing and purchasing information.

Abstract

In this paper, we discuss the design issues for an authorization framework for Web Services. In particular, we describe the features required for an authorization policy language for Web Services. We briefly introduce the authorization service provided by Microsoft .NET MyServices and describe our extended authorization model that proposes extensions to the .NET MyServices authorization service to support a range of authorization policies required in commercial systems. We discuss the application of the extended authorization model to a health care system built using Web Services. We use the XML Access Control Language (XACL) in our implementation to demonstrate our extended authorization model. This also enables us to evaluate the range of authorization policies that XACL supports.

The IRMA Community

Research IRM

Authorization Service for Web Services and its Application in a Health Care Domain

Purchase

Abstract

Related Content

IRMA Sponsors