A comprehensive security architecture for dynamic, web service based virtual organizations for businesses

In this paper we propose a security architecture for Virtual Organizations for businesses. The Virtual Organizations we consider are based on web servicetechnology, and are dynamic, i.e. their membership may change frequently throughout its lifetime. The security architecture advances over previous approaches with a new approach for distributed administration based on policy generation which allows local security administrators to remain in complete control over the policies deployed. We show the advantages of our architecture in the case of member replacement.