Access control and authorization constraints for WS-BPEL

Proceedings - ICWS 2006: 2006 IEEE International Conference on Web Services

Volumn , Issue , 2006, Pages 275-284

  Bertino, Elisa ^a   Crampton, Jason ^b   Paci, Federica ^c  

^a PURDUE UNIVERSITY   (United States)

^b UNIVERSITY OF LONDON   (United Kingdom)

^c UNIVERSITY OF MILAN   (Italy)

Author keywords

[No Author keywords available]

Indexed keywords

AUTHORIZATION CONSTRAINTS; AUTHORIZATION INFORMATION;

COMPETITIVE INTELLIGENCE; CONSTRAINT THEORY; INFORMATION ANALYSIS; WEB SERVICES; XML;

ACCESS CONTROL;

EID: 38949086163     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ICWS.2006.21     Document Type: Conference Paper

References (17)

1. G.-J. Ahn, R. Sandhu, M. Kang, and J. Park. Injecting RBAC to secure a web-based workflow system. In Proceedings of the 5th ACM Workshop on Role-Based Access Control, pages 1-10, 2000.
2. V. Atluri and W. Huang. An authorization model for work-flows. In Proceedings of the 4th European Symposium on Research in Computer Security, pages 44-64, 1996.
3. E. Bertino, E. Ferrari, and V. Atluri. The specification and enforcement of authorization constraints in workflow management systems. ACM Transactions on Information and System Security, 2(1):65-104, 1999.
4. R. Botha and J. Eloff. Separation of duties for access control enforcement in workflow environments. IBM Systems Journal, 40(3):666-682, 2001.
5. F. Casati, S. Castano, and M. Fugini. Managing workflow authorization constraints through active database technology. Information Systems Frontiers, 3(3):319-338, 2001. Also available as Technical Report HPL-2000-156, Hewlett Packard Laboratories.
6. E. Christensen, F. Curbera, G. Meredith, and S. Weerawarana. Web Services Description Language 1.1. W3C, 2001. Available at http://www.w3.org/TR/wsdl.
7. J. Crampton. A reference monitor for workflow systems with constrained task execution. In Proceedings of the 10th ACM Symposium on Access Control Models and Technologies, 2005.
8. J. Crampton. XACML and role-based access control, 2005. Presentation at DIMACS Workshop on Security of Web Services and e-Commerce.
9. F. Leymann. Web services flow language (WSFL 1.0). IBM Software Group, 2001. Available at http://www-306.ibm.com/software/solutions/webservices/ pdf/WSFL.pdf.
10. OASIS. Core and Hierarchical Role Based Access Control (RBAC) Profile of XACML, Version 2.0, 2004. OASIS Committee Draft (A. Anderson, editor). Available at http://www.oasis-open.org/committees/documents.php?wg_abbrev=xacml.
11. OASIS. extensible Access Control Markup Language (XACML) Version 2.0, 2005. OASIS Committee Specification (T. Moses, editor). Available from http://www.oasis-open.org/committees/documents.php?wg_abbrev=xacml.
12. OASIS. Web Services Business Process Execution Language Version 2.0, 2005. OA-SIS Committee Working Draft. Available at http://www.oasis- open.org/committees/documents.php?wg_abbrev=wsbpel.
13. M. Rusinkiewicz and A. Sheth. Specification and execution of transactional workflows. In Modern Database Systems: The Object Model, Interoperability, and Beyond, pages 592-620. Addison-Wesley, 1995.
14. S. Thatte. XLANG - Web Services for Business Process Design. Microsoft Corporation, 2001. Available at http://www.gotdotnet.com/team/ xml_wsspecs/xlang-c/default.htm.
15. W3C. XML Path Language (XPath) Version 1.0, 1999. W3C Recommendation (J. Clark and S. DeRose, editors). Available at http://www.w3.org/TR/xpath.
16. W3C. XML Schema, 2004. Available at http://www.w3.org/XML/Schema.
17. J. Wainer, P. Barthelmess, and A. Kumar. W-RBAC - A workflow security model incorporating controlled overriding of constraints. International Journal of Cooperative Information Systems, 12(4):455-486, 2003.