TY - GEN
T1 - Authorization service for web services and its implementation
AU - Indrakanti, Sarath
AU - Varadharajan, Vijay
AU - Hitchens, Michael
N1 - Copyright 2004 IEEE. Reprinted from Proceedings of the IEEE International Conference on Web Services (ICWS'04), June 6-9, 2004, San Diego, California, USA. IEEE Computer Society 2004. This material is posted here with permission of the IEEE. Such permission of the IEEE does not in any way imply IEEE endorsement of any of Macquarie University’s products or services. Internal or personal use of this material is permitted. However, permission to reprint/republish this material for advertising or promotional purposes or for creating new collective works for resale or redistribution must be obtained from the IEEE by writing to [email protected]. By choosing to view this document, you agree to all provisions of the copyright laws protecting it.
PY - 2004
Y1 - 2004
N2 - In this paper, we introduce the authorization issues for Web Services. We introduce the authorization service provided by Microsoft® .NET MyServices and then briefly describe our proposed modifications and extensions to the authorization service. We discuss the application of the extended authorization model to a healthcare system built using Web Services. We used the XML Access Control Language (XACL) to specify policies in XML and control access to the patient records stored in XML format. We then evaluated the suitability of XACL as an authorization policy language for Web Services.
AB - In this paper, we introduce the authorization issues for Web Services. We introduce the authorization service provided by Microsoft® .NET MyServices and then briefly describe our proposed modifications and extensions to the authorization service. We discuss the application of the extended authorization model to a healthcare system built using Web Services. We used the XML Access Control Language (XACL) to specify policies in XML and control access to the patient records stored in XML format. We then evaluated the suitability of XACL as an authorization policy language for Web Services.
UR - http://www.scopus.com/inward/record.url?scp=4544368101&partnerID=8YFLogxK
U2 - 10.1109/ICWS.2004.1314814
DO - 10.1109/ICWS.2004.1314814
M3 - Conference proceeding contribution
AN - SCOPUS:4544368101
SN - 0769521673
SN - 9780769521671
SP - 774
EP - 777
BT - Proceedings - IEEE International Conference on Web Services
PB - Institute of Electrical and Electronics Engineers (IEEE)
CY - Los Alamitos, CA
T2 - Proceedings - IEEE International Conference on Web Services
Y2 - 6 July 2004 through 9 July 2004
ER -