An authorization mechanism for Web services using an attribute certificate

Abstract

Web services make the distributed computing based on XML technology possible and are being watched with a new technology to replace the existing distributed computing such as CORBA, Java RMI, and DCOM. One of the issues that needs to be solved to deploy Web services is just Web services security. It is necessary to satisfy the security features like user authentication, confidentiality, integrity, nonrepudiation, and user authorization. We design and implement a system that makes the effective authorization for Web service users possible by using an attribute certificate for Web services.