Securing Web service compositions: Formalizing authorization policies using event calculus

Abstract

This paper presents a formal model for composing security policies dynamically to cope with changes in requirements or occurrences of events. We address one particular issue - that of authorization within a Web services composition. In particular, we propose a dynamic authorization model which allows for complex authorization policies whilst ensuring trust and privacy between the components services. © 2006 Springer-Verlag.