Show simple item record

dc.contributor.authorXu, Jie
dc.contributor.authorZhang, Dacheng
dc.contributor.authorLi, Xianxian
dc.contributor.authorLiu, Lu
dc.date.accessioned2012-03-06T11:17:53Z
dc.date.available2012-03-06T11:17:53Z
dc.date.issued2010-06-17
dc.identifier.citationDynamic Authentication for Cross-Realm SOA-Based Business Processes 2010 IEEE Transactions on Services Computingen
dc.identifier.issn1939-1374
dc.identifier.doi10.1109/TSC.2010.33
dc.identifier.urihttp://hdl.handle.net/10545/214395
dc.descriptionAuthentication, inter-organizational security, multi-party interactions, Service-Oriented Architecture, Web servicesen
dc.description.abstractModern distributed applications are embedding an increasing degree of dynamism, from dynamic supply-chain management, enterprise federations, and virtual collaborations to dynamic resource acquisitions and service interactions across organizations. Such dynamism leads to new challenges in security and dependability. Collaborating services in a system with a Service-Oriented Architecture (SOA) may belong to different security realms but often need to be engaged dynamically at runtime. If their security realms do not have a direct cross-realm authentication relationship, it is technically difficult to enable any secure collaboration between the services. A potential solution to this would be to locate intermediate realms at runtime, which serve as an authentication-path between the two separate realms. However, the process of generating an authentication path for two distributed services can be highly complicated. It could involve a large number of extra operations for credential conversion and require a long chain of invocations to intermediate services. In this paper, we address this problem by designing and implementing a new cross-realm authentication protocol for dynamic service interactions, based on the notion of service-oriented multi-party business sessions. Our protocol requires neither credential conversion nor establishment of any authentication path between the participating services in a business session. The correctness of the protocol is formally analyzed and proven, and an empirical study is performed using two production quality Grid systems, Globus 4 and CROWN. The experimental results indicate that the proposed protocol and its implementation have a sound level of scalability and impose only a limited degree of performance overhead, which is for example comparable with those security-related overheads in Globus 4.
dc.language.isoenen
dc.relation.urlhttp://ieeexplore.ieee.org/lpdocs/epic03/wrapper.htm?arnumber=5487492en
dc.rightsArchived with thanks to IEEE Transactions on Services Computingen
dc.titleDynamic authentication for cross-realm SOA-based business processesen
dc.typeArticleen
dc.contributor.departmentUniversity of Leedsen
dc.contributor.departmentUniversity of Derbyen
dc.identifier.journalIEEE Transactions on Services Computingen
refterms.dateFOA2019-02-28T12:45:33Z
html.description.abstractModern distributed applications are embedding an increasing degree of dynamism, from dynamic supply-chain management, enterprise federations, and virtual collaborations to dynamic resource acquisitions and service interactions across organizations. Such dynamism leads to new challenges in security and dependability. Collaborating services in a system with a Service-Oriented Architecture (SOA) may belong to different security realms but often need to be engaged dynamically at runtime. If their security realms do not have a direct cross-realm authentication relationship, it is technically difficult to enable any secure collaboration between the services. A potential solution to this would be to locate intermediate realms at runtime, which serve as an authentication-path between the two separate realms. However, the process of generating an authentication path for two distributed services can be highly complicated. It could involve a large number of extra operations for credential conversion and require a long chain of invocations to intermediate services. In this paper, we address this problem by designing and implementing a new cross-realm authentication protocol for dynamic service interactions, based on the notion of service-oriented multi-party business sessions. Our protocol requires neither credential conversion nor establishment of any authentication path between the participating services in a business session. The correctness of the protocol is formally analyzed and proven, and an empirical study is performed using two production quality Grid systems, Globus 4 and CROWN. The experimental results indicate that the proposed protocol and its implementation have a sound level of scalability and impose only a limited degree of performance overhead, which is for example comparable with those security-related overheads in Globus 4.


Files in this item

Thumbnail
Name:
Dynamic Cross-Realm Authentication ...
Size:
682.6Kb
Format:
PDF

This item appears in the following Collection(s)

Show simple item record