Problem statement

1
Problem statement

• Access control for service composition
• Valuable contents are exchanged via various
  entities
• e.g., multimedia contents, user profile, billing
  information, agreement documents, QoS declaration
• Intermediate entities may be either trusted or
  untrusted, and have their own access rights
• Composition model and trust relationship may be
  either dynamic or static
• Existing approach
• Based on end-to-end model
• e.g. Multimedia content distribution over mobile
  network
• Designed for specific services based on specific
  hardware, software, or network
• Not support dynamic service composition

2
Work plan

• Design access control mechanism
• Support dynamic composition and various trust
  relationship
• Enable automatic handling (i.e. server-to-server
  transaction) of access control
• Device-/service-independent
• Enforcement (encryption) and verification
  (signature) protocol which enable element-wise
  control
• Approach
• Prototype based on SOAP XML
• Specify XML schema for access control
• Follow the MPEG work on RDD/REL (CfP status)
• Related work
• Access control is not addressed in SAHARA
  project, so far.
• Authentication Access control shall be build
  with appropriate authentication system
• Billing Access control is closely related to
  billing mechanism. Complex billing (e.g.
  subcontract) model shall be considered.