E-Commerce Design and Implementation Tutorial

Transcription

1 A Mediated Access Control Infrastructure for Dynamic Service Selection Dissertation zur Erlangung des Grades eines Doktors der Wirtschaftswissenschaften (Dr. rer. pol.) eingereicht an der Fakultat fur Wirtschaftswissenschaften der Universitat Regensburg vorgelegt von Christoph Fritsch Berichterstatter: Prof. Dr. Giinther Pernul Prof. Dr. Peter Lory Tag der Disputation: 7. Mai 2012

2 Contents 1 Introduction Motivation and Background Research Questions Research Methodology Chapter Structure 6 1 Fundamentals 9 2 Smart Business Networks Inter-Organizational Collaboration Remarkable Demand for Flexibility The SPIKE Project SPIKE Basics and Vision Overview and Main Objectives Process Specification and Semantic Workflows as a Basis SPIKE Portal and Service Bus as Runtime Security as a Major Focus Summary 21 3 Service-oriented Architecture SOA Basics Web Services Web Services vs. Web-based Services Technological Options SOAP Web Services RESTful Web Services Further Web Service Alternatives The Need for Service Descriptions Service Description Formats Service Discovery and Registries Enterprise Service Bus Standards and Specifications 42

3 3.3.2 ESB Main Functionalities Business Process Modelling and Management Dynamic SOA for Spontaneous Cooperation Summary 50 4 Security in Dynamic SOA Security Functions and Implications Term»Security« Security Glossary Fundamental Security Functions Different Perspectives: User, Service Provider, Broker Security Implications Security and Business Context of Identity Digital Identity Cross-Organizational Identity and Access Management Single-Sign-On Identity Federation and Trust Relationships Web Service Security Defining Security Requirements and Policies Web Service Security Tokens SOAP Web Services and the WS-* Stack RESTful Services Related Research Mediated Authorization and Access Control Summary 76 II Proposed Dynamic Service Selection and Mediated Access Control Infrastructure 77 5 Access Control Infrastructure Context Overview Terms and Definitions Status Quo Design Considerations Significance and Pervasiveness of Security Preconditions Design Goals Summary 91

4 6 ESB-based Dynamic Service Selection Initial Position From Static to Dynamic Service Selection Desirable Properties and Current Limitations Degrees of Freedom Addressed Challenges Related Work Dynamic Service Selection Semantic Technologies Conceptual Overview Uniform Service Description as a Basis Standards-Based Implementation Components and Capabilities Organizational Levels and Alternative Options Opportunities and Limitations Summary Dynamic Mediated Access Control Infrastructure Status Quo Infrastructure Characteristics Conceptual Overview Attribute-Based Pull Access Management Roles, Functions and Allocation Course of Actions and Global Architecture Building Blocks and Components Mediator and Security Broker Role and Challenges Implementation Alternatives Implementation Option Decision Trust Implications and Attacker Model Integration with Dynamic Service Selection Identity Provider Role and Challenges Interdependencies Service Provider Role and Challenges Dependencies Service Access Control and Policy Definition Service Clients and Requesters Role and Challenges Implementation Options 155

5 7.5.5 User Role and Challenges User Profile Authorization Summary Identity Provider/Security Token Service Key Functions and Interaction User Profile Access Control Disclosure Willingness and Attribute Release Policy Partial Identity Definition, Authorization and Access Control Convenient and Adequate Interfaces Identity Management GUI Security Token Service Security Token Retrieval Credentials Assignment and Storage Security Tokens Allocation and Mapping Attribute Aggregation and Assertions Security Credentials Mapping Summary Access Control Credential Enrichment Basic Principle: Inversion of Access Control Credentials Enrichment Process Mediation Infrastructure and Security Broker Interrelations Policy Evaluation Service Providers' Service Access Policy Users' Profile Access Policies Service Selection Strategy and Policy Impact Summary 192 III Implementation Prototype Service Selection and Access Control Infrastructure Components Overview 197 ^ ESB-based Mediator Service Discovery and Candidate Pool Dynamic Selection and Routing Services Mediation and Transformation Services Credential Enrichment Services/Security Broker

6 10.2 Identity Provider and Security Token Service Web IdP Mobile IdP STS Endpoint and Brokering Service IdP, Attribute and Token Discovery Security Token Query Endpoint Security Tokens and Attribute Formats Store Security Token Endpoint OAuth-Based Access Control Summary Conclusions 225 Appendices 229 A Security Tokens and Policies 231 B Axschema.org Attribute Identifiers 235 C STS Endpoint Specifications 237 Bibliography 241