A Safe Delegation Method for Web Services in Pervasive Computing Environments

Web Services are the new building block of today’s Internet, and provides interoperability among heterogeneous distributed systems. In this environment, security is one of the most critical issues. An attacker may expose user privacy and service information without authentication. Furthermore, in the pervasive computing environment, the users of web services must temporarily delegate some or all of their rights to an agent to perform actions on their behalf. This results in the exposure of user’s privacy information by agents. We present a delegation model to support secure web services in pervasive computing environments. In order to support privacy protection, service confidentiality, and assertion integrity, encryption and a digital signature mechanism is deployed. We build web service management server based on XACML, in order to manage services and policies of web service providers. SAML is extended, in order to declare delegation assertions transferred to web service providers, by delegation among agents. Key words: XACML, SAML, Agen