Security and Privacy Management in Service Oriented Architectures: Development of a Web Services Architecture for Managing Sensitive Data

Wolfgang Schreiner

ISBN 10: 3639034961 / ISBN 13: 9783639034967

Published by VDM Verlag Dr. M�ller 2009-02-27, 2009

About this Item

Seller Inventory # 6666-IUK-9783639034967

Bibliographic Details

• Title: Security and Privacy Management in Service Oriented Architectures: Development of a Web Services Architecture for Managing Sensitive Data
• Publisher: VDM Verlag Dr. M�ller 2009-02-27
• Publication Date: 2009
• Language: English
• ISBN 10: 3639034961
• ISBN 13: 9783639034967
• Binding: Paperback
• Condition: New

About this title

Synopsis

The book is focused on the analysis and design of a novel software architecture with the purpose of supporting distributed user and document management. Particular attention is dedicated to the outsourcing of sensitive semi-structured document data to untrustworthy database servers and related security concerns. Current standardization efforts in the field of Web service security serve as starting point for the development of core security components with special focus on sensitive data encryption, key management and authorization of user requests. Real world application settings are identified, whereas main selection criteria comprise the applicability of multi-user systems and a high demand for security mechanisms for managing sensitive data sets. Results are demonstrated and tested by prototypical reference implementations. The closing specification of the developed interfaces provides means for future integration of the security services with existing application systems. Second edit. rev.

About the Author

is a professional IT Consultant in the banking and financial industry. He graduated both in Business Informatics and Computer Science and received his Ph.D. from the Vienna University of Technology in the field of Web Services Security. As a researcher he spent a year in Australia where he was working on SAP data and business process integration.