An intelligent access control for Web services based on service oriented architecture platform

With the rapid development of Web applications and services, there have been security threats appearing on the Web based software systems. Web services are a new approach in providing efficient information and services using distributed computing. It is an important step towards service-oriented architecture (SOA). This paper describes the design of a reusable access control layer for Web services software. The layer is designed as an independent software component which is separated from the application components of Web applications and services. It applies expert system type of rules using an inference engine to determine security rules and access rights