WSSQoP v0.3 6 Nov 2003

1. WSSQoP v0.36 Nov 2003

2. Basic approach <definitions> <QoPSpec> <definitions> <definitions> <QoPSpec> <QoPSpec> Security policy manager Security policy manager Applied security policy Applied security policy Consumer class Provider class Consumer domain Provider domain

3. Process models • Development-time • Not very useful • Inflexible • No separation of duties • Deployment-time • Two architectural models • Out-of-line • In-line • Run-time • Ditto

4. Out-of-line model <definitions> <definitions> <defintions> <QoPSpec> <QoPSpec> <QoPSpec> Security policy manager Security policy manager Consumer class Provider class Security service Security service WSS- SOAP WSS- SOAP

5. Security service Security service SOAP WSS- SOAP WSS- SOAP SOAP In-line model <definitions> <definitions> <defintions> <QoPSpec> <QoPSpec> <QoPSpec> Security policy manager Security policy manager Consumer class Provider class SOAP SOAP

6. Data-model • Services • Mechanisms • Parameters

7. Services • Identified by URI or QName • Extensibility point • Define common services, such as:- • Transport integrity • Originator authentication • Type is a set of Mechanism definitions

8. Mechanisms • Identified by URI or QName • Extensibility point • Define common mechanisms, such as:- • SSL • XML DSig • Type is a set of Parameter definitions

9. Parameters • Identified by URI or QName • Extensibility point • Define common parameters, such as:- • Encryption algorithm • Key-size • Type depends on the Parameter name

10. Deriving applied policy