Method and system for object-based multi-level security in a service oriented architecture

摘要

A method for administering object-based multi-level security in a service oriented architecture includes defining a plurality of multi-level security attributes for each of selected respective life-cycle states of a plurality of life-cycle states of a service object, receiving a request from a requestor for the service object, determining permitted actions for the service object based upon at least one selected multi-level security attribute of the plurality of multi-level security attributes, and based upon at least one life-cycle state of the plurality of life-cycle states of the service object, and generating a quality of service security contract based upon the determination of permitted actions.