Managing access in extended enterprise networks Web service-based

Most businesses have industrial partnerships with other businesses. We want to develop systems that can automate extended enterprise business processes. BCAs (Bridge Certification Authority), creates a combined multi-enterprise PKI (public key infrastructures) at the cost of increased complexity when evaluating the acceptability of certificates. But today's COTS (Commercial off-the-shelf) products are not entirely prepared to meet the challenges of bridge-connected PKIs. The paper focuses on how to design a secure access control mechanism in extended enterprise networks based on Web service. The characteristics of the two kinds of method are analyzed in detail. The secure access control mechanism has integrated the role-based access control in X.509v4 PMI (Privilege Management Infrastructure) with the XML security. The paper deals with the realization procedure, and some measures to improve the system's running efficiency are suggested also.