Access control enforcement for conversation-based web services

摘要: Service Oriented Computing is emerging as the main approach to build distributed enterprise applications on Web. The widespread use of Web services hindered by lack adequate security and privacy support. In this paper, we present a novel framework for enforcing access control in conversation-based services. Our takes into account conversational nature This contrast with existing approaches enforcement that assume service set independent operations. Furthermore, our achieves tradeoff between need protect service's policies disclose clients portion related conversations they are interested in. important avoid situations where client cannot progress conversation due required requirements. We introduce concept k-trustworthiness defines which can provide credentials maximizing likelihood it will eventually hit final state.