Formal consistency verification between BPEL process and privacy policy

ACM International Conference Proceeding Series

Volumn , Issue , 2006, Pages

  Li, Yin Hua ^a   Paik, Hye Young ^a   Benatallah, Boualem ^a  

^a UNIVERSITY OF NEW SOUTH WALES   (Australia)

Author keywords

business process; consistency verification; graph transformation; privacy policy

Indexed keywords

GRAPH THEORY; GRAPHIC METHODS; WEB SERVICES; WEBSITES;

BUSINESS PROCESS; CONSISTENCY VERIFICATIONS; GRAPH TRANSFORMATION; GRAPH-BASED SPECIFICATION; PRIVACY CONCERNS; PRIVACY POLICIES; SEMANTICAL FOUNDATIONS; TRANSFORMATION BASED; WEB SERVICE COMPOSITION LANGUAGES; WEBS SERVICES;

DATA PRIVACY;

EID: 78649827615     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1501434.1501466     Document Type: Conference Paper

References (25)

1. Web Service Privacy. http://www.serviceoriented.org/ws-privacy.html.
2. A.Nadalin, C.Kaler, R.Monzillo, and P.Hallam-Baker. Web service security: Ws-security specification. http://docs.oasis-open.org/wss/2004/, Feb 2006.
3. A. Anderson. Comparison of two privacy policy languages: Epal and xacml, tech report. Technical Report TR-2005-147, Sun Microsystems Laboratories, 2005.
4. T. Andrews and F. Curbera. Business process execution language for web services(1.1). ftp://www6.software.ibm.com/software/developer/librar bpel.pdf, May 2003.
5. P. Ashley, S. Hada, G. Karjoth, C. Powers, and M. Schunter. Enterprise privacy authorization language(EPAL 1.2). http://www.w3.org/Submission/EPAL/, November 2003.
6. S. Bajaj and D. Box. Web services policy framework(ws-policy). http://specs.xmlsoap.org/ws/2004/09/policy/ws-policy.pdf, Sep 2004.
7. P. A. Calvin S. Powers and M. Schunter. Privacy promises, access control, and privacy management. In Int'l Symp. Electronic Commerce (ISEC-02), 2002.
8. R. Chinnici, J.-J. Moreau, A. Ryman, and S. Weerawarana. Web Services Description Language (WSDL) Version 2.0. http://www.w3.org/TR/wsdl20, August 2005.
9. L. Cranor, M. Langheinrich, and M. Marchirio. A P3P preference exchange language 1.0. W3C working draft, Feb 2001.
10. H. Ehrig, G. Engels, H.-J. Kreowski, and G. Rozenberg. Handbook of Graph Grammars and Computing by Graph Transformation. World Scientific, 1999.
11. Q. He. Privacy enforcement with an extended role-based access control model. Technical Report TR-2003-09, NCSU Computer Science, 2003.
12. C. D. K. Jess Arias Fisteus, Luis Snchez Fernndez. Formal verification of bpel4ws business collaborations. In 5th International Conference on Electronic Commerce and Web Technologies (EC-Web '04), LNCS, Zaragoza, Spain, August 2004. Springer.
13. G. Karjoth, M. Schunter, and E. V. Herreweghen. Translating privacy practices into privacy promises-how to promise what you can keep. In 4th IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY 2003), Lake Como, Italy, pages 135-146. IEEE Computer Society, June 2003.
14. M. Koch, L. V. Mancini, and F. Parisi-Presicce. A formal model for role-based access control using graph transformation. In Proc. of 5th ESORICS, pages 122-139. Springer, 2000.
15. M. Koch, L. V. Mancini, and F. Parisi-Presicce. Graph-based specification of access control policies. J. Comput. Syst. Sci., 71(1):1-33, 2005.
16. Y. H. Li and S. Benbernou. Representing and reasoning about privacy abstractions. In Proceedings of the 6th International Conference on Web Information Systems Engineering (WISE'05), New York, USA, 2005.
17. M. L. Lorrie Cranor, Giles Hogben, M. Presler-Marshall, J. Reagle, and M. Schunter. The platform for privacy preference 1.1(P3P 1.1) specification. http://www.w3.org/TR/2004/WD-P3P11-20040720, July 2004.
18. A. Martens. Consistency between executable and abstract processes. In 2005 IEEE International-Conference on e-Technology, e-Commerce, and e-Services (EEE 2005), 29 March-1 April 2005, Hong Kong, China, pages 60-67. IEEE Computer Society, 2005.
19. T. Moses. extensible access control markup language (xacml) version 2.0. http://docs.oasis-open.org/xacml/2.0/access-control-xacml-2.0-core-spec-os.pdf, Feb 2005.
20. T. Moses. Privacy policy profile of xacml v2.0. http://docs.oasis-open.org/xacml/2.0/access-control-xacml-2.0-privacy-profile-spec-os.pdf, Feb 2005.
21. P.Baldan, B.Knig, and B.Knig. A logic for analyzing abstractions of graph transformation systems. In In Proc. of SAS '03,International Static Analysis Symposium, page 255272. Springer LNCS 2694, 2003.
22. R.Heckel and A.Wagner. Ensuring consistency of conditional graph grammars: a constructive approach. Theoretical Computer Science, (1), 1995.
23. a. e. Steve Anderson. Web Services Trust Language(WS-Trust). http://specs.xmlsoap.org/ws/2005/02/trust/WS-Trust.pdf.
24. A. F. Westin. Privacy and Freedom. Bodley Head, 1970.
25. A. I. A. william Stufflebeam and Q. He. Specifying privacy polices with P3P and EPAL: Lessons learned. In Proc. of Workshop on privacy in the Electronic Society(WPES'04), 2004.