Security (Re: [soa-rm] Definition of "Service Consumer")

["Anders W. Tell" <anderst@toolsmiths.se>]

Hi,

This is getting interesting so Ill just join in

There seem to be good reasons why security or maybe more appropriate 
security related functions could be part of a (abstract) RM. Functions 
such as (add,verify)integrity, (add,verify)confidentiality, 
(add,verify)authentication etc.

If one wants to later relate a RM to economical and legel aspects such 
as those found in service level agreements then such abstract function 
seems relevant.

The rigth to refuce service access may be a function of 
authenticationverification of issuer, sender ,indended receive, addressee.

So Ill think Ken is right that it maybe a good point keeping it on the 
agenda and removed later if deemed to concrete.

/Anders

Ken Laskey wrote:

> Moreover, the question is whether all SOAs SHOULD have security and 
> whether that needs to be captured in the RM.  As noted, secuirty is 
> often just tacked on and that may not be sufficient for *any* SOA to 
> be successful.
>
> Ken
>
> At 02:27 PM 4/11/2005, Duane Nickull wrote:
>
>> The RM does not support security models.  A reference model is used 
>> to guide the design of architecture that may include specific 
>> security protocols or models. Our requirement must be to ensure that 
>> nothing we place in the RM makes any specific security model a 
>> requirement (since not all SOA's have security) and to ensure that we 
>> do not preclude a specific type of security model from being used.
>> Duane
>>
>> Vikas Deolaliker wrote:
>>
>>> I think the question should be how many different types of security 
>>> models
>>> will this RM support?
>>> Vikas
>>>
>>> -- 
>>
>> -- 
>>
>> ***********
>> Senior Standards Strategist - Adobe Systems, Inc. - http://www.adobe.com
>> Vice Chair - UN/CEFACT Bureau Plenary - http://www.unece.org/cefact/
>> Adobe Enterprise Developer Resources  - 
>> http://www.adobe.com/enterprise/developer/main.html
>> ***********
>>
>
> -- 
>      
> --------------------------------------------------------------------------------- 
>
>   /   Ken 
> Laskey                                                                \
>  |    MITRE Corporation, M/S H305    phone:  703-883-7934   |
>  |    7515 Colshire Drive                    fax:      703-883-1379   |
>   \   McLean VA 22102-7508                                              /
>     
> ---------------------------------------------------------------------------------- 
>
>
>
>


-- 

Best Regards
/Anders

////////////////////////////
/ Anders W. Tell           /
/ Financial Toolsmiths AB  /
/ <anderst@toolsmiths.se>  /
////////////////////////////

-----------------------------------------------------------------------
CONFIDENTIALITY AND DISCLAIMER NOTICE

 This e-mail in its entirety, including any associated files, are 
confidential and intended only for the addressee named above. 
If you are not the intended recipient or the person responsible for 
delivering to the intended recipient, be advised that you have received
this email in error and that any use of the information contained 
within this email or attachments is strictly prohibited.

 The contents should not be disclosed to any other person nor copies 
taken. Any views or opinions presented are solely those of the sender 
and do not necessarily represent those of Toolsmiths unless otherwise 
specifically stated.

 As internet communications are not secure we do not accept legal 
responsibility for the contents of this message nor responsibility for
any change made to this message after it was sent by the original 
sender. 

We advise you to carry out your own virus check before opening any 
attachment as we cannot accept liability for any indirect or 
consequential damages sustained as a result of any software viruses. 
If you have received this email in error, or if you are concerned with
the content of this email please notify Toolsmiths by sending e-mail 
to us at: info@toolsmiths.se.
-----------------------------------------------------------------------