An Authorization Mechanism for Web Services using an improved Attribute Certificate and WSDL CAO Peng1,ZHANG Yongping2 (College of Computer Science, China University of Mining and Technology, Xuzhou Jiangsu Province,221008,China) 【Abstract】Web services make the distributed computing based on XML technology possible and are being watched with a new technology to replace the existing distributed computing such as CORBA,Java RMI,and DCOM.One of the issues those should be basically solved to deploy web services is just Web services security.It is necessary to satisfy the security features like user authentication,confidentiality,integrity,non-repudiation,and user authorization.In this paper,we design and implement a system that makes the effective authorization for web service users possible by using an attribute certificate for web services. 【Key words】Web Services,Attribute Certificate,Access Control,Authentication,Authorization