Automatic composition of web services is a challenging task. Many works have considered
simplified automata models that abstract away from the structure of messages exchanged by
the services. For the domain of security services (such as digital signing or timestamping) we
propose a novel approach to automated composition of services based on their security
policies. The approach amounts to collecting the constraints on messages, parameters and
control flow from the components services and the goal service requirements. A constraint …