WS4Dsec - Reliably Secure Web Services for Devices

以分布式方式提供数据处理服务的小型和自发交互设备的数量不断增加，加速了确保可靠安全的数据处理的需求。如今，嵌入式系统已经足够强大，可以提供Web服务，从而实现临时设备连接作为可互操作的跨域解决方案。因此，不可避免地要保密地处理数据，并确保基于服务的交互在其安全数据交换方面是可验证的。拟议的项目WS4Dsec面临着与设备Web服务（WS4D）相关的安全问题的挑战。我们将实现一个名为WS4Dsec的工具包，它为支持WS4D的设备集成提供了一个组合的开发和验证过程。此外，它将包括自动代码生成功能，以降低开发可靠安全服务交互的复杂性。因此，动态连接设备的特殊要求不同于企业领域中传统静态Web服务系统的要求。易变的网络特性和对灵活性的高要求的组合提出了对用于受限设备上的有状态服务交互的新的可验证安全概念的需要。因此，WS4Dsec将提供一种机制，能够对安全和有状态的交互设备集合进行正式验证。

The increasing number of small and spontaneous interacting devices offering services for data processing in a distributed manner accelerates the need to ensure a reliably secured data handling. Nowadays, embedded systems are powerful enough to provide Web Services and thus enabling ad-hoc device connections as interoperable cross domain solutions. Therefore, it is inevitable to handle data confidentially and to ensure that service based inter-actions are verifiable regarding their secure data exchange. The proposed project WS4Dsec faces this challenge of security issues related to Web Services for Devices (WS4D). We will realize a toolkit called WS4Dsec that enables a combined development and verification process for WS4D-enabled devices ensembles. Moreover, it will include capabilities for automatic code generation to reduce the complexity for the development of reliably secured service interactions. Thereby, the special requirements of dynamically connected devices differ from those used for traditional static Web Service systems in the enterprise domain. The combination of volatile network characteristics and a high demand on flexibility raises the need for new verifiable security concepts for stateful service interactions on constrained devices. Therefore, WS4Dsec will provide mechanisms that enable a formal verification of secure and stateful interacting devices ensembles.