Design of a Comprehensive Authorisation Framework for Service Oriented Architecture (SOA).

摘要

Service Oriented Architecture (SOA) has attracted considerable industry attention because of the benefits it offers such as allowing interoperability over a heterogeneous environment, amongst others. However, security is one of the main roadblocks for enterprises when it comes to the development and deployment of their SOAs. Although there are several SOA security standards available, there is as yet no standard available for SOA authorisation. In this report, we propose a comprehensive authorisation framework for SOA.