A policy-based authorization model for workflow-enabled dynamic process management

Journal of Network and Computer Applications

Volumn 32, Issue 2, 2009, Pages 412-422

  Cao, Jian ^a   Chen, Jinjun ^b   Zhao, Haiyan ^c   Li, Minglu ^a  

^a SHANGHAI JIAO TONG UNIVERSITY   (China)

^b SWINBURNE UNIVERSITY OF TECHNOLOGY   (Australia)

^c UNIVERSITY OF SHANGHAI FOR SCIENCE AND TECHNOLOGY   (China)

Author keywords

Access control policy; Dynamic business process; Workflow

Indexed keywords

ENTERPRISE RESOURCE MANAGEMENT; MANAGEMENT; SECURITY SYSTEMS; SOFTWARE PROTOTYPING; WORK SIMPLIFICATION;

ACCESS CONTROL POLICY; AUTHORIZATION MODELS; AUTHORIZATION POLICIES; BUSINESS PROCESSES; DYNAMIC BUSINESS PROCESS; DYNAMIC PROCESS MANAGEMENTS; ENTERPRISE RESOURCES; HUMAN-CENTRIC; MULTIPLE ACCESS CONTROLS; ORGANIZATIONAL MODELS; PROTOTYPE IMPLEMENTATIONS; WORKFLOW; WORKFLOW MANAGEMENT SYSTEMS;

ACCESS CONTROL;

EID: 59249091815     PISSN: 10848045     EISSN: 10958592     Source Type: Journal    
DOI: 10.1016/j.jnca.2008.02.021     Document Type: Article

References (29)

1. Akhil K, Zhao LJ. EROICA: A rule-based approach to organizational, policy management. In: Meng X, Su J, Wang Y, editors. Workflow systems, WAIM 2002, Lecture notes in computer science, vol. 2419, 2002. p. 201-212.
2. Atluri V., and Wei Kuang H. A petri net based safety analysis of workflow authorization models. J Comput Secur 8 2/3 (2000) 209-240
3. Becker J, zur Muehlen M. Workflow application architectures: classification and characteristics of workflow-based information systems. In: Fischer Layna, editor. Workflow handbook, 2002. p. 39-50.
4. Bertino E., and Ferrari E. The specification and enforcement of authorization constraints in workflow management systems. ACM Trans Inf Syst Secur 2 1 (1999) 65-104
5. Botha R.A., and Eloff J.H.P. Separation of duties for access control enforcement in workflow environments. IBM Syst J 40 3 (2001) 666-681
6. Bussler C. Organisationsverwaltung in workflow-management-systemen (1998), Deutscher Universit.ts-Verlag, Wiesbaden, Germany
7. Bussler C, Jablonski S. Policy resolution for workflow management systems. In: 28th Hawaii international conference on system sciences, hicss, 1995. p. 831-840.
8. Casati F., Castano S., and Fugini M.G. Managing workflow authorization constraints through active database technology. J Inf Syst Front (Special Issue on Workflow Automation And Business Process Integration) 3 3 (2001) 319-338
9. Chen J, Yang Y. Adaptive selection of necessary and sufficient checkpoints for dynamic verification of temporal constraints in grid workflow systems. ACM Trans Autonomous Adaptive Syst 2007a; 2(2), Article 6.
10. Chen J., and Yang Y. A taxonomy of grid workflow verification and validation. Concurr Comp-Pract E 20 4 (2007) 347-360
11. Chung P.W.H., Cheunga L., and Stader J. Knowledge-based process management-an approach to handling adaptive workflow. Know-Based Syst 16 3 (2003) 149-160
12. Duenren L., and Minxin S. Workflow modeling for virtual processes: an order-preserving process-view approach. Inf Syst 28 6 (2003) 505-532
13. History of Workflow Research-From Office Automation to Workflow Management, 〈http://www.workflow-research.de/research/〉, 2004.
14. IBM. Business Process Execution Language for Web Services, Version 1.1, 〈ftp://www6.software.ibm.com/software/developer/library/ws-bpel11.pdf〉, 2004.
15. Leymann F., and Roller D. Production workflow: concepts and techniques (2000), Prentice-Hall, Englewood Cliffs, NJ
16. Minxin S, Gwo-Hshiung T, Duen-Ren L. Multi-criteria task assignment in workflow management systems. In: Proceedings of the 36th Hawaii international conference on system sciences (HICSS'03) 2003. p. 202-210.
17. Moore C. Common mistakes in workflow implementations (2002), Giga Information Group, Cambridge, MA IdeaByte, RIB-062002-00118
18. Myungjae K, Dongsoo H, Jaeyong S. A framework for dynamic workflow interoperation using multi-subprocess task. In: Proceedings of the 12th international workshop on research issues in data engineering: engineering e-commerce/e-business systems (RIDE.02), 2002. p. 99-130.
19. Rupietta W. Organization and role models for workflow processes. In: Lawrence P. (Ed). Workflow handbook 1997 (1997), Wiley, Chichester, UK 165-172
20. van der Aalst W.M.P. A reference model for team-enabled workflow management systems. Data Know Eng 38 3 (2001) 335-363
21. van der Aalst W.M.P., and Hofstede A.H.M.T. Workflow patterns. Distributed Parallel Databases 14 1 (2003) 5-51
22. van der Aalst W.M.P., and Jablonski S. Dealing with workflow change: identification of issues and solutions. Comput Syst Sci Eng 15 5 (2000) 267-276
23. Willaert P, Van den Bergh J, Willems J, Deschoolmeester D. The process-oriented organisation: a holistic view developing a framework for business process orientation maturity. In: Alonso G, Dadam P, Rosemann M, editors. Business process management, 5th international conference, BPM 2007, Brisbane, Australia: September 24-28, 2007, Proceedings, lecture notes in computer science, vol. 4714, 2007. p. 1-15
24. Wolter C, Schaad A. Modeling of task-based authorization constraints in BPMN. In: Alonso G, Dadam P, Rosemann M. editors. Business process management, 5th international conference, BPM 2007, Brisbane, Australia, September 24-28, 2007, Proceedings, lecture notes in computer science, vol. 4714, 2007. p. 64-79.
25. Workflow Management Coalition, WFMC-TC-1011, 〈http://www.wfmc.org/standards/docs/TC-1011_term_glossart_v3.pdf〉, 1999.
26. Workflow Management Coalition, 〈http://www.wfmc.org〉, 2004.
27. Xiangpeng Z, Cerone A, Krishnan P. Verifying BPEL workflows under authorization constraints. In: Dustdar S, Fiadeiro JL, Sheth AP, editors. Business process management, 4th international conference, BPM 2006, Vienna, Austria, September 5-7, 2006, Proceedings, lecture notes in computer science, vol. 4102, 2006. p. 439-444.
28. Yan-Nong H, Ming-Chien S. Policies in a resource manager of workflow systems: modeling, enforcement and management, HPL-98-156, 〈http://www.hpl.hp.com/techreports/98/HPL-98-156.pdf〉, 1998.
29. Zur Muehlen M. Organizational management in workflow applications-issues and perspectives, 〈http://www.workflow-research.de/Publications/PDF/MIZU-ITM(2004).pdf〉, 2004.