Using Composition Policies to Manage Authentication and Authorization Patterns and Services

This paper presents a policy-driven approach to service engineering, addressing the gap between static structure specification and dynamic behavioral specification. By this we mean providing a more complete means of documenting the composition of separately specified behaviors. We introduce the concept of a policy enforcement state machine diagram to specify the linking of collaborations for which the behavior has been specified separately using semantic connectors. We also use composition patterns which define constraints/restrictions on collaborations that run in parallel in a service.