Secure Hardware-based Distributed Authorisation Underpinning a Web Service Framework

Casassa Mont, Marco ; Baldwin, Adrian ; Pato, Joe

HP Development Company

关键词: authorisation;    access control;    secure hardware;    web services;   

RP-ID  :  HPL-2003-144

学科分类：计算机科学（综合）

美国|英语

来源: HP Labs

【 摘 要 】

This paper presents a distributed authorisation model suitable for use in a web service framework where multiple parties are involved in performing a particular transaction. The authorisation model uses a third party authorisation service that checks users or services' credentials against a set of authorisation policies. A traditional service provision model does not scale well for such transactions. The proposed model uses a hardware security appliance to deliver the service to the most appropriate site involved in the transaction. The authorisation model supports a multi-party session so that authorisation policies can be checked and built as part of the web service composition process. 14 Pages