Security in SOA 11g

Question

Hi ,
One of our clients wanted attribute level security based on levels.
For Example :
Lets say the input message contains elements A,B,C. The sensitivity of A is Level 1, B is Level 2, C is Level 3 where each level means the following:
Level 1: Confidential Data
Level 2: Sensitive Data
Level 3: Public Data
The requirement is to secure this message ( and elements A,B,C) in such a way that only the recipient who can see level 1(or level2 or level 3) gets that data in the message?
This is very urgent . Appreciate your immediate response.
Oracle SOA Suite 11g
Component : BPEL
Regards,
Sridhar.
Edited by: Sridhar-SOA on May 23, 2012 10:47 PM

Answer 1

I could do the attribute level encryption my providing the attributes in the policy for which encryption needs to be done.
But I am not able to identify how could I attach a keystore to a policy.
For eg :
Asssuming the input payload has elements a,b,c,d,e,f,g,h,i
I created policy-1 for encrypting only elements a,b,c , policy-2 for encrypting only elements d,e,f,
,policy-3 for encrypting only elements g,h,i.
In Weblogic Server console - Security Realms - Users
I have created 3 users level-1 user , level-2 user and leve-3 user.
How do I assign the level-1 /2/3 users to policy-1/2/3 respectively.?
Kindly help.