US 8,346,929 B1 · System and method for generating secure Web service architectures using a Web Services security assessment methodology

Abstract

System and method for designing and implementing secure Web Services according to a Web Services Security Assessment structured methodology and design patterns. Lifecycles of the Web Services Security Assessment structured methodology may include, but are not limited to: vision and strategy, architecture design, development, integration, and deployment. In one embodiment, security components may be identified based on one or more use case requirements. Web Services objects that need to be protected may be identified. The object relationship for security protection may be defined, and associated trust domains, security policy and strategy and threat profiles may be identified. Protection schemes for these Web Services objects may be generated. Web Services security design patterns may be applied. One embodiment may be implemented as a secure Web Services architecture design mechanism that may receive Web Services requirements as input and assist a user in designing and generating a secure Web Services architecture.

Claims57

Dependent claims

A Web Service system, comprising:

a service provider comprising one or more computer systems configured to provide one or more secure Web Services on the Web Service system;
and
one or more service requesters each comprising one or more computer systems and each configured to access the one or more secure Web Services from the service provider via a network;
wherein the Web Service system is configured according to output of a computer-implemented Web Service architecture design system for designing secure Web Services comprising a plurality of heterogeneous components and one or more security components, wherein the Web Service architecture design system is configured to:
receive one or more Web Service requirements for the Web Service system;
receive user input specifying one or more design aspects of a secure Web Service architecture for the Web Service system;
generate the Web Service architecture in accordance with the received Web Service requirements, the received user input, a Web Services security assessment structured methodology, and one or more security design patterns;
and
generate the output including information indicating the secure Web Service architecture;
and
wherein the Web service system further comprises a service registry implemented on one or more computer systems, wherein the service provider is further configured to register and publish the secure Web Services in the service registry, and wherein the service requester is further configured to discover the service provider through the service registry.

8 more elements

Dependencies are inferred from the claim text.

System and method for generating secure Web service architectures using a Web Services security assessment methodology

Life of this patent

System and method for generating secure Web service architectures using a Web Services security assessment methodology

Life of this patent

Abstract

Claims57