Comprehensive life cycle support for access rules in information systems: The CEOSIS project

Enterprise Information Systems

Volumn 3, Issue 3, 2009, Pages 219-251

  Rinderle Ma, Stefanie ^a   Reichert, Manfred ^a  

^a UNIVERSITY OF ULM   (Germany)

Author keywords

Access control; Access rule life cycle; Change; Enterprise information system

Indexed keywords

ACCESS RULES; BUSINESS DOCUMENTS; BUSINESS FUNCTIONS; CHANGE; CONTROL ACCESS; DIRECT ACCESS; ENTERPRISE INFORMA-TION SYSTEMS; ENTERPRISE INFORMATION SYSTEM; FORMAL SEMANTICS; IN-PROCESS; LIFE CYCLE SUPPORT; LITTLE RESEARCH; ROLE-BASED;

ELECTROCHEMICAL CORROSION; FORMAL METHODS; INFORMATION SYSTEMS; LIFE CYCLE; SECURITY SYSTEMS; SEMANTICS;

ACCESS CONTROL;

EID: 70449688135     PISSN: 17517575     EISSN: 17517583     Source Type: Journal    
DOI: 10.1080/17517570903045609     Document Type: Article

References (44)

1. Berroth, M., 2005. Design of a component for organizational models. Master's thesis, University of Ulm, Computer Science Faculty (in German).
2. Bertino, E., 1998. Data security. Data & Knowledge Engineering, 25 (1-2), 199-216.
3. Bertino, E., Ferrari, E., and Alturi, V., 1999. The specification and enforcement of authorization constraints in WFMS. ACM Transactions on Information and System Security, 2 (1), 65-104.
4. Bishop, M., 2002. Computer security. Addison-Wesley Professional.
5. Botha, R. and Eloff, J., 2001. A framework for access control in workflow systems. Information Management and Computer Security, 9 (3), 126-133.
6. Domingos, D., Rito-Silva, A., and Veiga, P., 2003. Authorization and access control in adaptive workflows. In: European Symposium on Research in Computer Science (ESORICS′03), Gjovik, Norway, 23-28.
7. Edmond, D. and ter Hofstede, A., 2000. A reflective infrastructure for workflow adaptability. Data and Knowledge Engineering, 34 (3), 271-304.
8. Fent, A., Reiter, H., and Freitag, B., 2002. Design for change: Evolving workflow specifications in ULTRAflow. In: International conference on advanced information systems engineering, May, 516-534.
9. Ferraiolo, D.F., Chandramouli, R., and Kuhn, D.R., 2003. Role-based access control. Artech House, Incorporated.
10. Ferraiolo, D. and Kuhn, D., 1992. Role based access control. In: National computer security conference.
11. Herbst, H., 1997. Business rule-oriented conceptual modeling. Springer.
12. Herbst, H. and Myrach, T., 1996. A repository system for business rules. In: IFIP TC2- working conference on data semantics.
13. Jablonski, S., Schlundt, M., and Wedekind, H., 2001. A generic component for the computer- based use of organizational models (in German). Informatik Forschung und Entwicklung, 16,23-34.
14. Joeris, G. and Herzog, O., 1998. Managing evolving workflow specifications. In: International conference on cooperative information systems, August, New York City, 310-321.
15. Klarmann, J., 2001a. A comprehensive support for changes in organizational models of workflow management systems. In: International conference on information systems modeling, 375-387.
16. Klarmann, J., 2001b. Using conceptual graphs for organization modeling in workflow management systems. In: Conference Professionelles Wissensmanagement, 19-23.
17. Kochut, K., et al., 2003. IntelliGEN: A distributed workflow system for discovering protein- protein interactions. Distributed and Parallel Databases, 13 (1), 43-72.
18. Konyen, I., 1996. Organizational structures and business processes in hospitals. Master's thesis, University of Ulm, Computer Science Faculty (in German).
19. Konyen, I., et al., 1996a. Process design for an in-patient chemotherapy. Internal Computer Science Report DBIS-5, Ulm University (in German).
20. Konyen, I., et al., 1996b. A process design for the area of minimal-invasive surgery. Internal Computer Science Report DBIS-14, Ulm University (in German).
21. Kramer, J. and Magee, J., 1990. The evolving philosophers problem: Dynamic change management. IEEE Transactions on Software Engineering, 16 (11), 1293-1306.
22. Kuhn, D., 1997. Mutual exclusion of roles as a means of implementing separation of duty in role-based access control systems. In: Proceedings of 2nd ACM workshop on role-based access control, 23-30.
23. Ly, L., et al., 2005. Mining staff assignment rules from event-based data. In: Proceedings of BPM'05 workshops, workshop on business process intellingence, 177-190.
24. March, J., et al., 2000. The dynamics of rules. Stanford University Press.
25. Miller, M., Yee, K., and Shapiro, J., 2003. Capability myths demolished. Technical report, Combex, Inc.
26. NIST, 2004. Proposed standard for role-based access control. http://csrc.nist.gov/rbac/rbacSTDACM.pdf
27. Pfeiffer, V., 2005. A framework for evaluating access control concepts in workflow manage-ment systems. Master's thesis, University of Ulm, Computer Science Faculty (in German).
28. Reichert, M. and Dadam, P., 1998. ADEPTflex - supporting dynamic changes of workflows without losing control. Journal of Intelligent Information Systems, 10 (2), 93-129.
29. Reichert, M., et al., 2009. Architecural principles and components of adaptive process management technology. In: PRIMIUM - Process Innovation for Enterprise Software, 81-97.
30. Reichert, M., Wiedemuth-Catrinescu, U., and Rinderle, S., 2004. Evolution of access control in information systems. In: Conference on electronical business processes (in German), Klagenfurt, 100-114.
31. Rinderle, S. and Reichert, M., 2005. On the controlled evolution of access rules in cooperative information systems. In: Cooperative Information Systems, LNCS 3760, 238-255.
32. Rinderle, S. and Reichert, M., 2007. A formal framework for adaptive access control models. Journal on Data Semantics, IX, 82-112.
33. Rinderle, S., Reichert, M., and Dadam, P., 2004a. Correctness criteria for dynamic changes in workflow systems - a survey. Data and Knowledge Engineering, 50 (1), 9-34.
34. Rinderle, S., Reichert, M., and Dadam, P., 2004b. Flexible support of team processes by adaptive workflow systems. Distributed and Parallel Databases, 16 (1), 91-116.
35. Rinderle-Ma, S. and Reichert, M., 2008. Managing the life cycle of access rules in CEOSIS. In: 12th IEEE international enterprise computing conference, 257-266.
36. Rinderle-Ma, S. and van der Aalst, W., 2007. Life-cycle support for staff assignment rules in information systems. Technical report WP-213, Beta Research School for Operations Management and Logistics, TU Eindhoven.
37. Sadiq, S., Marjanovic, O., and Orlowska, M., 2000. Managing change and time in dynamic workflow processes. International journal on cooperative information systems, 9 (1-2), 93- 116.
38. van der Aalst, W., 2001. Exterminating the dynamic change bug: A concrete approach to support worfklow change. Information Systems Frontiers, 3 (3), 297-317.
39. van der Aalst, W. and Jablonski, S., 2000. Dealing with workflow change: Identification of issues and solutions. In: International journal of computer systems, science and engineering, 267-276.
40. Wainer, J., Barthelmess, P., and Kumar, A., 2003. W-RBAC - a workflow security model incorporating controlled overriding of constraints. International Journal of Collaborative Information Systems, 12 (4), 455-485.
41. Weber, B., et al., 2005. Balancing flexibility and security in adaptive process management systems. In: International conference on cooperative information systems, November, Agia Napa, Cyprus.
42. Weske, M., 1999. Adaptive workflows based on flexible assignment of workflow schemes and workflow instances. In: Proceedings of GI-workshop enterprise-wide and cross-enterprise workflow-management (Informatik'99), October, Paderborn, 42-48.
43. Wiedemuth-Catrinescu, U., 2002. Evolution of organizational models in workflow management systems. Master's thesis, University of Ulm, Computer Science Faculty (in German).
44. zur Muehlen, M., 2004. Organizational management in workflow applications - issues and perspectives. Information Technology and Management, 5 (3-4), 271-291.