IBM and Microsoft Corp., along with a small fleet of partners, will submit in September three new security specifications to OASIS: WS-SecurityPolicy, WS-SecureConversation and WS-Trust. The submission of these specifications continues a tradition, started in 2002, where IBM and Microsoft first announce the evolution of their Web services security work at Burton Group's Catalyst Conference North America, held in July. The three specifications submitted to the Organization for the Advancement of Structured Information Standards, or OASIS, further define the process of working with security tokens, brokering trust relationships, securing messaging, establishing security context and defining security policy assertions—basically, how Web services can establish a trusted relationship and then carry out reliable communication inside the trust domain.
|