Deploying Access Control with Audit Management for Web Services Based on XACML Standard

Web services represent a challenge and an opportunity for organizations wishing to expose product and services offering through Internet. However, any organization using XML and Web Services must ensure that only the users who have right, can sent their appropriate XML content and can access the services. The eXtensible Access Control Markup Language (XACML) has established itself as a solution for controlling access in an interoperable and flexible way. But XACML still suffers from some limitations which impact its ability to support the actual requirements of web services. This paper is an effort to implement the five important features that an access control system should possess as per the XACML standard and implementing these features to an institution management system through J2EE platform. By doing so, we assure an efficient access control framework for today’s open web service applications.