Using Composition Policies to Manage Authentication and Authorization Patterns and Services

This paper presents a policy-driven approach to service engineering, addressing the gap between static structure specification and dynamic behavioral specification. By this we mean providing a more complete means of documenting the composition of separately specified behaviors. We introduce the concept of a policy enforcement statemachine diagram to specify the linking of collaborations for which the behavior has been separately specified using semantic connectors. We also use composition patterns which define constraints/restrictions on collaborations that run in parallel in a service.