Specification of Access Control Policies for Web Services

Abstract

In this paper we design an access control policy language WSACPL for web services. The WSACPL language is comprised of the WSACPL policy ontology, and includes a mechanism to induce SWRL language to express access control rules. The paper also brings up the method to compute authorization results of composite processes in OWLS. On the analysis of cause and kinds of policy conflicts, the paper represents the method to resolve conflicts among WSACPL policies.