Lars Olson, University of Illinois at Urbana-Champaign
Like other open computing environments, web services need a scalable method of determining authorized users. We present desiderata for authorization facilities for web services, and analyze potential ways of satisfying them. We propose a third-party authorization system for web services based on trust negotiation, discuss its implementation using the TrustBuilder runtime system for trust negotiation, and present performance results from a stock trading application.
Citation:
Lars Olson, Marianne Winslett, Gianluca Tonti, Nathan Seeley, Andrzej Uszok, Jeffrey Bradshaw, "Trust Negotiation as an Authorization Service forWeb Services," icdew, pp.21, 22nd International Conference on Data Engineering Workshops (ICDEW'06), 2006