ABSTRACT:

Modern distributed business applications are embedding an increasing degree of automation and dynamism, from dynamic offer-chain management, enterprise federations, and virtual collaborations to dynamic service interactions across organizations. Such dynamism ends up in new challenges in security and dependability. In Service-Oriented Architecture (SOA), collaborating services might belong to different security realms however typically need to be engaged dynamically at runtime. If a cross-realm authentication relationship can not be generated dynamically at runtime between heterogeneous security realms, it's technically difficult to enable dynamic business processes through secure collaborations between services. A potential solution to the current drawback is to generate a trust relationship across security realms therefore that a user can use the credential within the native security realm to obtain the credentials to access resources in a remote realm. However, the method of generating such types of trust relationships between two disjoint security realms is very advanced and time consuming, which could involve a large range of additional operations for credential conversion and require collaborations in multiple security realms. In this paper, we propose a new cross-realm authentication protocol for dynamic service interactions. This protocol will not need credential conversion or institution of authentication ways.