308
Copyright © 2012, IGI Global. Copying or distributing in print or electronic forms without written permission of IGI Global is prohibited.
Chapter 14
Masoom Alam
Institute of Management Sciences, Pakistan
Mohammad Nauman
Institute of Management Sciences, Pakistan
Xinwen Zhang
Samsung Information Systems America, USA
Tamleek Ali
Institute of Management Sciences, Pakistan
Patrick C. K. Hung
University of Ontario Institute of Technology,
Canada
Quratulain Alam
Institute of Management Sciences, Pakistan
Behavioral Attestation
for Web Services Based
Business Processes
ABSTRACT
Service Oriented Architecture (SOA) is an architectural paradigm that enables dynamic composition of
heterogeneous, independent, multi-vendor business services. A prerequisite for such inter-organizational
workfows is the establishment of trustworthiness, which is mostly achieved through non-technical mea-
sures, such as legislation, and/or social consent that businesses or organizations pledge themselves to
adhere. A business process can only be trustworthy if the behavior of all services in it is trustworthy.
Trusted Computing Group (TCG) has defned an open set of specifcations for the establishment of
trustworthiness through a hardware root-of-trust. This paper has three objectives: frstly, the behavior
of individual services in a business process is formally specifed. Secondly, to overcome the inherent
weaknesses of trust management through software alone, a hardware root of-trust devised by the TCG,
is used for the measurement of the behavior of individual services in a business process. Finally, a veri-
fcation mechanism is detailed through which the trustworthiness of a business process can be verifed.
DOI: 10.4018/978-1-4666-1942-5.ch014