Web service security policy matching based on semantics

Abstract EN

An improved matching algorithm of Web service security concerns is proposed in this paper.

It performs matching requirement and capability security concerns of both consumer and provider.

WS-SP specifies the security requirements or capabilities of different web service participants.

Security requirement/capability of a participant is one of the most important non-functional properties of a web service.

The security concerns addressed within this paper emphasis on the security of a message (integrity and confidentiality) transmitted between the two participants.

The proposed matching algorithm states matching of a simple policy and complex policy of WS-SP.

In addition, a generalized matching algorithm is introduced to get the best-matched provider from a list of available providers for consumer requirements.