Authentication and authorization in web services

Abstract

In this paper, we give the design of a security model that encapsulates the basic modules needed for securing the access to a web service, which are authentication and authorization. Our model relies on WS-Security standards and another application layer technology, namely the "Lightweight Directory Access Protocol". We also implement and test the model, and provide several test case scenarios. Moreover, an evaluation in terms of performance is done in order to reduce the concerns about security bottleneck and overheads. Finally, we highlight some of our model's advantages and drawbacks. © 2011 Springer-Verlag.