An approach for consistent delegation in process-aware information systems

Lecture Notes in Business Information Processing

Volumn 117 LNBIP, Issue , 2012, Pages 60-71

  Schefer Wenzl, Sigrid ^a   Strembeck, Mark ^a   Baumgrass, Anne ^a  

^a VIENNA UNIVERSITY OF ECONOMICS AND BUSINESS   (Austria)

Author keywords

Access Control; Business Processes; Delegation; RBAC

Indexed keywords

ACCESS CONTROL;

BUSINESS PROCESS; DELEGATION; FORMAL DEFINITION; PROCESS-AWARE INFORMATION SYSTEMS; RBAC;

INFORMATION SYSTEMS;

EID: 84861668402     PISSN: 18651348     EISSN: None     Source Type: Book Series    
DOI: 10.1007/978-3-642-30359-3_6     Document Type: Conference Paper

References (21)

1. Atluri, V., Warner, J.: Supporting Conditional Delegation in Secure Workflow Management Systems. In: Proceedings of the 10th ACM Symposium on Access Control Models and Technologies, SACMAT (June 2005)
2. Barka, E., Sandhu, R.: Framework for Role-Based Delegation Models. In: Proceedings of the 16th Annual Computer Security Applications Conference, ACSAC (December 2000)
3. Cole, J., Derrick, J., Milosevic, Z., Raymond, K.: Author Obliged to Submit Paper before 4 July: Policies in an Enterprise Specification. In: Sloman, M., Lobo, J., Lupu, E.C. (eds.) POLICY 2001. LNCS, vol. 1995, pp. 1-17. Springer, Heidelberg (2001) (Pubitemid 33225337)
4. Crampton, J., Khambhammettu, H.: Delegation and Satisfiability in Workflow Systems. In: Proceedings of the 13th ACM Symposium on Access Control Models and Technologies, SACMAT (June 2008)
5. Crampton, J., Khambhammettu, H.: Delegation in Role-Based Access Control. International Journal of Information Security 7(2) (2008)
6. Crampton, J., Khambhammettu, H.: On Delegation and Workflow Execution Models. In: Proceedings of the 2008 ACM Symposium on Applied Computing, SAC (March 2008)
7. Ferraiolo, D.F., Kuhn, D.R., Chandramouli, R.: Role-Based Access Control, 2nd edn. Artech House (2007)
8. Joshi, J.B.D., Bertino, E.: Fine-grained Role-based Delegation in Presence of the Hybrid Role Hierarchy. In: Proceedings of the 11th ACM Symposium on Access Control Models and Technologies, SACMAT (June 2006)
9. Sandhu, R., Coyne, E., Feinstein, H., Youman, C.: Role-Based Access Control Models. IEEE Computer 29(2) (1996)
10. Schaad, A.: Detecting Conflicts in a Role-Based Delegation Model. In: Proceedings of the 17th Annual Computer Security Applications Conference, ACSAC (2001)
11. Schaad, A., Moffett, J.D.: Delegation of Obligations. In: Proceedings of the 3rd International Workshop on Policies for Distributed Systems and Networks, POLICY (June 2002)
12. Schefer, S., Strembeck, M.: Modeling Process-Related Duties with Extended UML Activity and Interaction Diagrams. Electronic Communications of the EASST 37 (March 2011)
13. Schefer, S., Strembeck, M., Mendling, J., Baumgrass, A.: Detecting and Resolving Conflicts of Mutual-Exclusion and Binding Constraints in a Business Process Context. In: Meersman, R., Dillon, T., Herrero, P., Kumar, A., Reichert, M., Qing, L., Ooi, B.-C., Damiani, E., Schmidt, D.C., White, J., Hauswirth, M., Hitzler, P., Mohania, M. (eds.) OTM 2011, Part I. LNCS, vol. 7044, pp. 329-346. Springer, Heidelberg (2011)
14. Shang, Q., Wang, X.: Constraints for Permission-Based Delegations. In: Proceedings of the 8th IEEE International Conference on Computer and Information Technology Workshops, CITWORKSHOPS (2008)
15. Strembeck, M.: Scenario-Driven Role Engineering. IEEE Security & Privacy 8(1) (2010)
16. Strembeck, M., Mendling, J.: Generic Algorithms for Consistency Checking of Mutual-Exclusion and Binding Constraints in a Business Process Context. In: Meersman, R., Dillon, T.S., Herrero, P. (eds.) OTM 2010, Part I. LNCS, vol. 6426, pp. 204-221. Springer, Heidelberg (2010)
17. Strembeck, M., Mendling, J.: Modeling Process-related RBAC Models with Extended UML Activity Models. Information and Software Technology 53(5) (2011)
18. Wainer, J., Kumar, A., Barthelmess, P.: DW-RBAC: A formal security model of delegation and revocation in workflow systems. Information Systems 32(3) (2007)
19. Warner, J., Atluri, V.: Inter-Instance Authorization Constraints for Secure Workflow Management. In: Proceedings of the 11th ACM Symposium on Access Control Models and Technologies, SACMAT (June 2006)
20. Zhang, X., Oh, S., Sandhu, R.: PBDM: A Flexible Delegation Model in RBAC. Proceedings of the 8th ACM Symposium on Access Control Models and Technologies, SACMAT (June 2003)
21. Zhao, G., Chadwick, D., Otenko, S.: Obligations for Role Based Access Control. In: Proceedings of the 21st International Conference on Advanced Information Networking and Applications Workshops, AINAW (May 2007)