Access control for the services oriented architecture
- 2 November 2007
- conference paper
- Published by Association for Computing Machinery (ACM)
Abstract
Federated Identity Management (FIdM) is being applied to Services Oriented Architecture (SOA) deployments that cross enterprise boundaries. Though federation is essential in order to address the distributed nature of SOA, these FIdM solutions have been found to be inflexible, unscalable, and difficult to use, manage, and upgrade. We contend that a major reason for these difficulties is that FIdM addresses the wrong aspect of the problem. Specifically, FIdM does not address the federation of access policies. What is needed is a system for Federated Access Management (FAccM). This paper demonstrates the benefits of FAccM over FIdM for SOA deployments and shows how FAccM can be implemented using the existing web services standards.Keywords
This publication has 9 references indexed in Scilit:
- Authorization-Based Access Control for the Services Oriented ArchitecturePublished by Institute of Electrical and Electronics Engineers (IEEE) ,2006
- Certificate-based authorization policy in a PKI environmentACM Transactions on Information and System Security, 2003
- IntroductionCommunications of the ACM, 2003
- Paradigm Regained: Abstraction Mechanisms for Access ControlLecture Notes in Computer Science, 2003
- CORBA: integrating diverse applications within distributed heterogeneous environmentsIEEE Communications Magazine, 1997
- The Confused DeputyACM SIGOPS Operating Systems Review, 1988
- KeyKOS architectureACM SIGOPS Operating Systems Review, 1985
- Programming semantics for multiprogrammed computationsCommunications of the ACM, 1966
- A general-purpose file system for secondary storagePublished by Association for Computing Machinery (ACM) ,1965