EFSOC: A Layered Framework for Developing Secure Interactions between Web-Services

This paper addresses the problem of defining and enforcing access control rules for securing service invocations in the context of a business process, and amortizes existing role-based access control models that allow for dynamic delegation and retraction of authorizations.