Access control model for WebServices eGovernment infrastructure.

Tam Ka Wing Matthew.Thesis (M.Phil.)--Chinese University of Hong Kong, 2003.Includes bibliographical references (leaves 84-89).Abstracts in English and Chinese.Acknowledgement --- p.iAbstract --- p.iTable of Contents --- p.iiiChapter 1 --- Introduction --- p.1Chapter 2 --- eGovernment Requirements --- p.5Chapter 2.1 --- Efficient Operation --- p.5Chapter 2.2 --- Citizen-centric Government --- p.7Chapter 2.3 --- Security --- p.10Chapter 2.3.1 --- Confidentiality --- p.10Chapter 2.3.2 --- Integrity --- p.12Chapter 2.3.3 --- Availability --- p.12Chapter 2.4 --- Support of eBusiness --- p.13Chapter 3 --- Webservices for e-Government - A Marriage for Interoperability --- p.15Chapter 4 --- A Webservices Based eGovernment Framework --- p.17Chapter 4.1 --- System Component Model --- p.17Chapter 4.2 --- System Access Model --- p.18Chapter 4.3 --- Security Model --- p.20Chapter 4.3.1 --- Access Right Model --- p.20Chapter 4.3.2 --- Authentication Model --- p.22Chapter 4.4 --- Transaction Model --- p.23Chapter 5 --- eGovernment WebServices Access Control --- p.25Chapter 5.1 --- eGovernment WebService --- p.25Chapter 5.2 --- Request of Access --- p.27Chapter 5.3 --- eGovernment Access Policy --- p.30Chapter 5.3.1 --- Administration Based Policy --- p.32Chapter 5.3.2 --- Legislation Based Policy --- p.33Chapter 6 --- Research in Access Control --- p.38Chapter 6.1 --- Traditional Model --- p.38Chapter 6.2 --- More Advanced Models --- p.39Chapter 6.2.1 --- Role-Based Access Control Model --- p.39Chapter 6.2.2 --- Task-Based Authorisation Control Models --- p.41Chapter 6.2.3 --- Digital Library Authorisation Model --- p.42Chapter 6.3 --- Recent Works --- p.44Chapter 6.4 --- Limitations of the Models --- p.45Chapter 7 --- Proposed Approach --- p.47Chapter 7.1 --- WebService Specific Access Control --- p.48Chapter 7.1.1 --- WebService Access Rules --- p.48Chapter 7.1.2 --- Authorisation Conflict Resolution --- p.50Chapter 7.2 --- Subject Based Access Control --- p.52Chapter 7.2.1 --- Subject Category --- p.52Chapter 7.2.2 --- Subject Access Rules --- p.53Chapter 7.2.3 --- WebService Registration --- p.55Chapter 7.2.4 --- Authorisation Conflict Resolution --- p.56Chapter 7.3 --- The WebServices --- p.57Chapter 7.4 --- Combining Two Level Access Control --- p.57Chapter 7.5 --- Application to Chained WebService Request --- p.58Chapter 7.6 --- Comparison with the Existing Access Control Models --- p.59Chapter 8 --- An Implementation Reference Model --- p.60Chapter 8.1 --- Some Practical Issues --- p.60Chapter 8.1.1 --- Citizen Privacy --- p.60Chapter 8.1.2 --- Trust between eGovernment Systems --- p.61Chapter 8.1.3 --- Authentication --- p.62Chapter 8.2 --- System Architecture --- p.64Chapter 8.2.1 --- eGovernment WebServices Gateway --- p.65Chapter 8.2.2 --- Authentication Engine --- p.66Chapter 8.2.3 --- Access Control Database --- p.66Chapter 8.2.4 --- Access Control Decision Engine --- p.67Chapter 8.2.5 --- A Working Scenario --- p.67Chapter 8.3 --- Implementation --- p.69Chapter 9 --- Evaluation of the Proposed Mechanism --- p.74Chapter 9.1 --- Application Scenarios --- p.75Chapter 9.1.1 --- Citizen Level Access Right --- p.75Chapter 9.1.2 --- Access Means Based Authorisation --- p.76Chapter 9.1.3 --- Access Right Based on Combination of User and Consumer Identity --- p.77Chapter 9.1.4 --- Legislation Based Access Right --- p.78Chapter 9.1.5 --- Joined-up Government --- p.79Chapter 10 --- Conclusion and Future Directions --- p.81References --- p.8