A policy Management System for Business Collaboration

Supervisor: Jian YangStudent ID: 40188949Name: Young Bo Choi

1

Abstract

Business collaborate to stay competitive. Business Collaboration can use web

services. Businesses adheres their own policies. Security policies do not match perfectly. Inconsistencies can be unacceptable. Businesses identify security policies.

2

Medical Online Booking System

consists of two web applications. exemplify the two authorization models demonstrate business collaboration. do medical online booking securely.

3

Agenda

Composite Service With Agent Authorization Model. A Hospital Web Application. A Hospital WCF Web Services. An Insurance Web Application. Conclusion.

4

Composite Service With Agent

The way business interact affects security policy.

5

Authorization Model

Insurance and hospital’s Authorization Models

Hospital

Insurance

6

A Hospital Web Application

Goal: Illustrate hospital’s authorization Model

Is built using 3-Layer Architecture in ASP.NET:

- Database Layer- Middle Layer- Presentation Layer

7

Database Layer

8

Middle Layer

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

A Hospital WCF Web Services.

30

A Hospital WCF Web Services.

31

An Insurance Web Application.

Goal 1: Illustrate Insurance’s authorization Model

Goal 2: Provide Online Booking Services.

Is built using 3-Layer Architecture in ASP.NET:

- Database Layer- Middle Layer- Presentation Layer

32

Database Layer

33

Middle Layer

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

Conclusion

Businesses can have authorization policy conflicts.

A service can be exposed to the unintended user.

Inconsistenices in Authorization policy need to be considered.

49