Orchestration for Secure Multi-party Communications in Web-Services ✩

Multi-party interactions in Web Service composition are hardly managed where parallel communications, while end-to-end security is respected, is difficult to be designed and verified. In this paper, we present an approach to handle and secure multi-party interactions in Web Service (WS) composition. A key ingredient of this methodology is to present the system composition at an abstract level as a component-based model where we verify and configure it securely. Then, we transform the model to generate secure orchestrator components that handle multi-party interactions. Afterwards, we generate accordingly BPEL processes where the security constrains are enforced as security WS-policies in the BPEL description of services. The framework we present is robust since founded on formal proves of the security properties. We validate this approach by securing a social network application called Whens App