Patent ID: 8024786

Claim:
A method of controlling and securing a service oriented architecture, comprising: a plurality of intermediaries, one intermediary for each web service of a plurality of web services, each intermediary intercepting a message between a requesting web service and a source web service, and each intermediary being associated with a requesting web service or a source web service; each intermediary examining the message to determine whether a security profile is embedded therein, wherein the security profile comprises a data security privilege, a services security privilege, and a user security privilege determined based on a security policy; each intermediary adding a security profile to the message if a security profile is not already present; and when a security profile is embedded in the message, each intermediary validating the message comprises comparing the security profile embedded in the message with a second security profile associated with the requesting web service, said second security profile also comprising a data security privilege, a services security privilege, and a user security privilege.