Authorization Framework for Service Oriented Architecure

Setting up secure application architecture is very challenging. The Service Oriented Architecture design allows and requires centrally manageable security services, among them the authorization service is the key to build model based security infrastructure. Although the theory of different security models are well-known, the definition and coding of the authorization rules are not complicated, due to the lack of robustness and high performance the solutions based on these models are still not in everyday use. This paper introduces an industry scale solution based on standard Tivoli technology to set up a universal authorization service.