Security for Web Services

Web服务是一种新兴的分布式计算范例，由于其动态分散的可伸缩特性，在不可信的Internet上运行，目前还没有适当的解决方案，因此在安全性方面提出了具有挑战性的问题。本研究讨论了web服务安全授权的模型、体系结构和设计。在灵活的授权模型方面取得了概念上的进步，提出了一种新的基于XML的策略语言，开发了一个全面的安全策略管理框架，设计了一个分布式授权服务，并在。net上演示了一个实用的安全web服务系统。提出了一种基于动态授权的冲突解决策略形式化推理的新方法。

Web services, an emerging distributed computing paradigm, poses challenging problems in security, due to their dynamic decentralised scalable nature, operating over an untrusted Internet, for which no adequate solutions exist today. This research addresses the model, architecture and design of secure authorisation for web services. It achieves conceptual advances in terms of a flexible authorisation model, proposes a new XML based policy language, develops a comprehensive security policy management framework, designs a distributed authorisation service and demonstrates a practical secure web service system in .NET.It presents a new approach to formally reasoning about conflict resolution policies with dynamic delegation.