Context-Aware Role-Based Access Control Model for Web Services

摘要

This paper first brief reviews the state of the security technology research and access control in the web service environment. Despite recent advances in access control approaches for Web Services, the heterogeneity of subjects and objects in Web Service environment has made it difficult to development of effective access control system. So we present a context-aware service-orient role-based access control model (CSRBAC). In CSRBAC model, access control system can make its access control decisions by capturing security relevant environmental context, such as time, location, operation state, or other environmental information. Based on CSRBAC model, a secure architecture model for Web Services is presented. It implements an access control system with dynamically grant and adapt permissions to users based on their current context. Compared to traditional access control mechanisms, the CSRBAC model can provide management flexibility and improved security for Web Services applications.