Authorization Service for Web Services and its Application in a Health Care Domain
نویسندگان
چکیده
In this paper, we discuss the design issues for an authorization framework for Web Services. In particular, we describe the features required for an authorization policy language for Web Services. We briefly introduce the authorization service provided by Microsoft .NET MyServices and describe our extended authorization model that proposes extensions to the .NET MyServices authorization service to support a range of authorization policies required in commercial systems. We discuss the application of the extended authorization model to a health care system built using Web Services. We use the XML Access Control Language (XACL) in our implementation to demonstrate our extended authorization model. This also enables us to evaluate the range of authorization policies that XACL supports.
منابع مشابه
A model for specification, composition and verification of access control policies and its application to web services
Despite significant advances in the access control domain, requirements of new computational environments like web services still raise new challenges. Lack of appropriate method for specification of access control policies (ACPs), composition, verification and analysis of them have all made the access control in the composition of web services a complicated problem. In this paper, a new indepe...
متن کاملSecurity and Authorization Issues in HL7 Electronic Health Records: A Semantic Web Services Based Approach
As Semantic Web services begin to emerge as the next evolution of the Service Oriented Architecture, it is become clear that authorization is going to be one of its biggest challenges. Not only are there the typical obstacles which most areas of Semantic Web services have had to overcome, i.e. what parts of a Web services need semantic information, how best to use the semantics, and agreeing on...
متن کاملSemantic Authorization of Mobile Web Services
With the recent developments in the cellular world, the high-end mobile phones and PDAs are becoming pervasive and are being used in different application domains. Integration of the web services and cellular domains lead to the new application domain, mobile web services. Mobile web service provisioning offers many of its applications in domains like e-commerce, collaborative applications, soc...
متن کاملExplanation of the Management Challenges of Health System Reform in Health Care Domain city QOM: A Qualitative Study (Iran)
Background and Objectives: Assessment, identification, and presentation of management challenges of running programs can help policymakers and administrators to overcome these deficiencies and achieve the objectives of the plan. This study was conducted with the aim of explanation of the management challenges and solutions for its elimination in the health sector of health system reform plan Qo...
متن کاملCompetition, complementarity and service level guarantee in Web services
Network and processing overhead associated with web services is a significant challenge to its performance. As a result, web service providers often announce a service level agreement. This ensures that consumers, who pay for the service, can get the service at a given quality level. In this paper, we study the competition between two providers offering functionally the same web services, whe...
متن کاملذخیره در منابع من
با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید
برای دانلود متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید
ثبت ناماگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید
ورودعنوان ژورنال:
- Int. J. Web Service Res.
دوره 2 شماره
صفحات -
تاریخ انتشار 2005