Securing industry-wide EPCglobal Network with WS-Security

Purpose - To provide the secure web services framework in an environment designed to integrate RFID system into the EPCglobal Network. Design/methodology/approach - Utilizing web services helps maximize the value of information generated from RFID systems and, taking advantage of web services security (WSS) technology, to provide an XML-based abstraction layer for established security technologies that delivers confidentiality, integrity, authentication, authorization, and non-repudiation in EPCglobal Network. Findings - This paper inspects four cases of trust relationships in one-to-one and one-to-many teamwork models that exemplify how the proposed WSS specifications being used in industry-wide EPCglobal Network are envisioned. For each of these cases the different security strategies were proposed. Also a comparative view is given, of discussed security strategies which businesses may wish to consult. Originality/value - This first proposed secure framework integrating web services and WSS technology to industry-wide EPCglobal Network will provide business an integration and collaboration capabilities, which make it easier for trading partners to electronically share real-time RFID data and conduct transactions in an accurate, complete, highly controlled, and secure environment.