A framework to support assurance-based service search

Web Service enterprise solutions are now one of the most important enablers of the new generation of applications supplying services on Internet. Web Services security standards and protocols are available to provide secure communication and conversation between service providers and consumers, but still it exists a gap in ensuring that a particular service hold, at execution time, specific security properties. In this paper we propose an architecture that will enable service consumers to specify the desired set of security properties the service must hold, providing a mechanism to re-check them when the execution context changes. In particular, we discuss the concept of context-aware certifificate, and a preliminary description of a dynamic, context-aware service certification approach.