Access Control Policies for Web Services in Medical Aid System

Along with the further improvement of Chinese medical aid system in 21st century, the system interface and security has been in front us. Web services are being positioned as the technological solution framework for achieving this aggregation in the context of cross-organizational business applications through the Internet. In such a context, security is currently one of the main concerns and several initiatives are currently ongoing aimed at achieving a standardized way for supporting integrity, confidentiality, and access control for XML Web services. In this paper, we have introduced the basic concepts for securing Web services, and propose the system architecture. Then access control policies specification for controlling access to Web services is implemented according to this architecture.