Towards automated secure web service execution (work in progress)

Abstract

Existing solutions for authentication and authorization in Web services make use of technologies such as SAML or WS-Security. These provide a static solution by using a set of predefined protocols. We propose a semantic security protocol model from which security protocol specifications are generated and automatically executed by participants. The proposed model consists of a sequential component, implemented as a WSDL-S specification, and an ontology component, implemented as an OWL specification. The correctness of the proposed model is ensured by using a set of rules and algorithms for generating it based on a protocol model given by the user.We validate our approach by generating and implementing several specifications for existing protocols such as ISO9798 or Kerberos protocols. © IFIP International Federation for Information Processing 2009.