A policy Management System for Business Collaboration Supervisor: Jian Yang Student ID: Name: Young Bo Choi 1

Abstract Business collaborate to stay competitive. Business Collaboration can use web services. Businesses adheres their own policies. Security policies do not match perfectly. Inconsistencies can be unacceptable. Businesses identify security policies. 2

Medical Online Booking System consists of two web applications. exemplify the two authorization models demonstrate business collaboration. do medical online booking securely. 3

Agenda Composite Service With Agent Authorization Model. A Hospital Web Application. A Hospital WCF Web Services. An Insurance Web Application. Conclusion. 4

Composite Service With Agent The way business interact affects security policy. 5

Authorization Model Insurance and hospital’s Authorization Models Hospital Insurance 6

A Hospital Web Application Goal: Illustrate hospital’s authorization Model Is built using 3-Layer Architecture in ASP.NET: - Database Layer - Middle Layer - Presentation Layer 7

Database Layer 8

Middle Layer 9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

A Hospital WCF Web Services. 30

A Hospital WCF Web Services. 31

An Insurance Web Application. Goal 1: Illustrate Insurance’s authorization Model Goal 2: Provide Online Booking Services. Is built using 3-Layer Architecture in ASP.NET: - Database Layer - Middle Layer - Presentation Layer 32

Database Layer 33

Middle Layer 34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

Conclusion Businesses can have authorization policy conflicts. A service can be exposed to the unintended user. Inconsistenices in Authorization policy need to be considered. 49