Building a Distributed Semantic-aware Security Architecture

Enhancing the service-oriented architecture paradigm with semantic components is a new field of research and goal of many ongoing projects. The results lead to more powerful web applications with less development effort and better user support. While some of these advantages are without doubt novel, challenges and opportunities for the security arise. In this paper we introduce a security architecture built in a semantic service-oriented architecture. Focusing on an attributebased access control approach, we present an access control model that facilitates semantic attribute matching and ontology mapping. Furthermore, our security architecture is capable of distributing the Policy Decision Point (PDP) from the service provider to different locations in the platform, eliminating the need of disclosing privacy-sensitive user attributes to the service provider. With respect to privacy preferences of the user and trust settings of the service provider, our approach allows for dynamicall...

• Type: Conference
• Year: 2007
• Where: SEC
• Authors: Jan Kolter, Rolf Schillinger, Günther Pernul
• Keywords: SEC 2007, Security Architecture, Security Privacy, Service Provider, Service-oriented Architecture