RESTful Security

We take a look into the REST architectural style of making scalable web applications and find out the critical requirements that mismatch with the current web security and privacy architecture. One of the core challenges is the inability of the web security model to scale up with caching when millions of users share confidential data inside communities. Our contribution includes a new solution for achieving RESTful security for web architecture without secure URLs. The solution scales up the performance of web services that require confidentiality protection and relaxes the security requirements for data storage networks by separating the access control decision from the data request. REST, web security, TLS, web caching, user privacy, key hierarchy, key derivation