Dynamic Stateful Service Security

Size: px

Start display at page:

Download "Dynamic Stateful Service Security"

Charla Hutchinson
6 years ago
Views:

1 Dynamic Stateful Security FIA Workshop, Prague 12 May 2009 Mike Surridge innovation.soton.ac.uk

2 Overview Why is dynamic service security important? How we implemented dynamic security? How this relates to service/policy semantics How dynamic security can be applied

3 Dynamic Business Contexts 1. Negotiate Consumer C SLA SLA Factory F 2. Update 3. Request 2. Create SLA Consumer C policy Context T storage 1. Select SLA Context S delegate credential 5. Store data 4. Create store Consumer D 3. Access service Context T Business Context Management Business Delegation

4 Implementation: Process-Based Access Control General approach similar to (say) XACML Key features of Process Based Access Control policies depend on service state as well as user role PDP allows these to be updated by the service Used extensively in GRIA 5.x

5 Dynamic Contextualised PDP Events and State Transitions Static Policy Policy Decision Point (PDP) Dynamic Policy Contexts and their States Context Creation State Changes Allowed Actions per State per and Role Subject Criteria for Roles Role Mappings Target Decision Request (subject, context and action) Decision Response (permit / deny) Policy Enforcement Point (PEP)

6 Policy: States and Roles Example: a simple lockable data storage service delete Start empty full create write lock unlock destroy destroy End locked Roles reader: can retrieve data from the service writer: can also upload or replace data owner: can also change role mappings States empty: service has no data writer: can upload data full: service has data reader: can read data writer: can replace data locked: service has data reader: can read data

7 Role Mappings and Semantics User Roles Reviewer Policy Management map toreader Roles Reader Editor map towriter Writer Author On-the-fly generation of semantic mappings Owner

8 Dynamic Security and Semantics States Semantic Workflow Roles Actors/Agents Dynamic Security process constraints process participation -centric centric Specifications XACML SAML Semantic Web process workflow agent roles User/agent-centric Specifications OWL-S, WSMO, etc FIPA, etc

9 Semantic Web Mediator Semantic Web description including orchestration and security constraints Security-aware service discovery Semantic Firewall Semantic Registry Dynamic PDP Dynamic, stateful, role-based policies Computationally efficient policy decisions /Network Administrator User Policy Enforcement Target

10 Semantic Web Mediator Semantic Web description including orchestration and security constraints Security-aware service discovery Semantic Firewall Semantic Registry Dynamic PDP Dynamic, stateful, role-based policies Computationally efficient policy decisions /Network Administrator Autonomic Management User Policy Enforcement Target

Application: TTP Simulation Crash Compatibility Testing, http://www.simdat.eu/1664.

11 Application: TTP Simulation Crash Compatibility Testing, Crash testing is now largely simulated during auto design Crash compatibility: are vehicles safe if they hit each other? Different manufacturers must contribute vehicle design data Neither wants the other to see their data Access to outputs may be conditional on the simulation outcome Centre, AUDI AG and other members of the SIMDAT consortium,

Application: TTP Simulation Crash Compatibility Testing, http://www.simdat.

12 Application: TTP Simulation Crash Compatibility Testing, AUDI AG and other members of the SIMDAT consortium,

13 Application: TTP Simulation Crash Compatibility Testing, AUDI AG and other members of the SIMDAT consortium,

14 Dynamic Business Applications 1. Negotiate 2. Update Consumer C ID STS Factory F Consumer C policy Context T 4. Update policy 2. Create ID 1. Select delegate credental 2. Establish trust 3. Select STS Context S STS Context S delegate credental(s) 3. Request ID token 4. Access service Anonymized Consumer D Anonymized Consumer D ID Management Federated Trust Management

15 Summary Dynamic security is a pre-requisite requisite for business- oriented service provision Dynamic security policies will normally be contextualised to a particular service and/or relationship stateful aware of service state role-based aware of service roles and the mappings of user credentials to these roles Dynamic policies can support semantic federated security via dynamic credential-role role mappings security-aware semantic service description Applications include dynamic SLA negotiation, collaborative computation, ID/trust management, etc

Obligation Standardization

Obligation Standardization Standardization David Chadwick, University of Kent Mario Lischka NEC Laboratories Europe 1 Problems with Existing Model s have not been handled fully, they are simply attribute assignments which are consumed