Web service technology provides basic infrastructure for deploying collaborative business processes. Web Service security standards and protocols aim to provide secure communication and conversation between service providers and consumers. Still, for a client calling a Web service it is difficult to ascertain that a particular service instance satisfies—at execution time—specific non-functional properties. In this paper we introduce the notion of certified Web service assurance, characterizing how service consumers can specify the set of security properties that a service should satisfy. Also, we illustrate a mechanism to re-check non-functional properties when the execution context changes. To this end, we introduce the concept of context-aware certificate, and describe a dynamic, context-aware service discovery environment.

Web service assurance : the notion and the issues / M. Anisetti, C.A. Ardagna, E. Damiani, F. Frati, H.A. Müller, A. Pahlevan. - In: FUTURE INTERNET. - ISSN 1999-5903. - 4:1(2012 Feb), pp. 92-109. [10.3390/fi4010092]

Web service assurance : the notion and the issues

M. Anisetti
Primo
;
C.A. Ardagna
Secondo
;
E. Damiani;F. Frati;
2012

Abstract

Web service technology provides basic infrastructure for deploying collaborative business processes. Web Service security standards and protocols aim to provide secure communication and conversation between service providers and consumers. Still, for a client calling a Web service it is difficult to ascertain that a particular service instance satisfies—at execution time—specific non-functional properties. In this paper we introduce the notion of certified Web service assurance, characterizing how service consumers can specify the set of security properties that a service should satisfy. Also, we illustrate a mechanism to re-check non-functional properties when the execution context changes. To this end, we introduce the concept of context-aware certificate, and describe a dynamic, context-aware service discovery environment.
Assurance ; Context-aware service certification ; Service discovery ; Service security ; Web service certification.
Settore INF/01 - Informatica
   Advanced Security Service cERTificate for SOA
   ASSERT4SOA
   EUROPEAN COMMISSION
   FP7
   257351
feb-2012
Article (author)
File in questo prodotto:
File Dimensione Formato  
futureinternet-04-00092.pdf

accesso aperto

Tipologia: Publisher's version/PDF
Dimensione 509.4 kB
Formato Adobe PDF
509.4 kB Adobe PDF Visualizza/Apri
Pubblicazioni consigliate

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/2434/169682
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 7
  • ???jsp.display-item.citation.isi??? ND
social impact