Trust-Based Privacy Authorization Model for Web Service Composition

The rapid growth of web applications has prompted increasing interest in the area of composite web services that involve several service providers. This increased use of composite services has meant that more and more personal information of consumers is being shared with web service providers, leading to the need to guarantee the privacy of consumers. This paper proposes a trust-based privacy authorization model for service composition, it uses privacy authorization policies to specify the privacy privileges of services. Then it utilizes the trust relationships among services to make privacy authorization decisions. Comparing to the traditional privacy access control approaches, this model can make the fine-grained authorization decision, thus efficiently protecting consumers' privacy.