A generic business artifacts based authorization framework for cross-enterprise collaboration

Annual SRII Global Conference, SRII

Volumn , Issue , 2012, Pages 70-79

  Limonad, Lior ^a   Boaz, David ^a   Hull, Richard ^b   Vaculin, Roman ^b   Heath, Fenno ^b  

^a IBM HAIFA RESEARCH LAB   (Israel)

^b IBM T J WATSON RESEARCH CENTER   (United States)

Author keywords

Business artifact (a.k.a business entity with lifecycle); Business process management; Cross enterprise collaboration; Service interoperation

Indexed keywords

ACCESS CONTROL MECHANISM; ARTIFACT-CENTRIC; AUTHORIZATION FRAMEWORKS; BUSINESS OBJECTIVES; BUSINESS PROCESS MANAGEMENT; CONVENTIONAL SERVICES; COOPERATIVE INTERACTIONS; DATA CENTRIC; ENTERPRISE COLLABORATION; INTEROPERATIONS; MULTIPLE ORGANIZATIONS;

ACCESS CONTROL; ENTERPRISE RESOURCE MANAGEMENT;

INDUSTRY;

EID: 84870824046     PISSN: 21660778     EISSN: 21660786     Source Type: Conference Proceeding    
DOI: 10.1109/SRII.2012.19     Document Type: Conference Paper

References (22)

1. R. Hull, N. Narendra, and A. Nigam, "Facilitating workflow interoperation using artifact-centric hubs, " Proc. Intl. Conf. on Service-Oriented Computing (ICSOC), pp. 1-18, 2009.
2. A. Nigam and N. S. Caswell, "Business artifacts: An approach to operational specification, " IBM Systems Journal, vol. 42, no. 3, pp. 428-445, 2003.
3. R. Hull, "Artifact-centric business process models: Brief survey of research results and challenges, " On the Move to Meaningful Internet Systems: OTM 2008, pp. 1152-1163, 2008.
4. "Artifact-Centric Service Interoperation (ACSI) EU Project, " European Union 7th Framework Programme Objective 1.2 "Internet of Services, Software and Virtualisation" (FP7-ICT-2009-5-Objective 1.2). [Online]. Available: http://www.acsi-project.eu/.
5. R. Cohn, D. and Hull, "Business artifacts: A data-centric approach to modeling business operations and processes, " IEEE Data Eng. Bull, vol. 32, no. 3, pp. 3-9, 2009.
6. K. B. P. Nandi, S. Kumaran, J. Chung, T. Heath, R. Das, "ADoc- Oriented Programming, " in The 2003 International Symposium on Applications and the Internet (SAINT'2003), 2003.
7. D. Cohn, P. Dhoolia, F. Heath, F. Pinel, and J. Vergo, "Siena: From PowerPoint to Web App in 5 Minutes, " Service-Oriented Computing- -ICSOC 2008, pp. 722-723, 2008.
8. R. Hull et al., "Business Artifacts with Guard-Stage-Milestone Lifecycles: Managing Artifact Interactions with Conditions and Events, " in ACM Intl. Conf. on Distributed Event-based Systems (DEBS), 2011.
9. R. Hull et al., "Introducing the Guard-Stage-Milestone Approach for Specifying Business Entity Lifecycles, " in Proc. of 7th Intl. Workshop on Web Services and Formal Methods (WS-FM 2010), 2010.
10. E. Damaggio, R. Hull, and R. Vaculín, "On the equivalence of incremental and fixpoint semantics for business artifacts with guardstage- milestone lifecycles." 2011.
11. R. V. and R. H. Terry Heath, "Barcelona: A design and runtime environment for modeling and execution of artifact-centric business processes, " in BPM'2011 demo track, 2011.
12. M. D. Saltzer, J.H. and Schroeder, "The protection of information in computer systems, " Proceedings of the IEEE, vol. 63, no. 9, pp. 1278-1308, 1975.
13. D. Todorov, "Mechanics of user identification and authentication: fundamentals of identity management, " 2007.
14. D. Hollingsworth, "The Workflow Reference Model. Workflow Management Coalition, " WFMC org, 1995.
15. V. Atluri and W. Huang, "An authorization model for workflows, " in Computer Security-ESORICS 96, 1996, pp. 44-64.
16. E. Bertino, E. Ferrari, and V. Atluri, "The specification and enforcement of authorization constraints in workflow management systems, " ACM Transactions on Information and System Security (TISSEC), vol. 2, no. 1, pp. 65-104, 1999.
17. D. L. Long, J. Baker, and F. Fung, "A prototype secure workflow server, " in Computer Security Applications Conference, 1999.(ACSAC'99) Proceedings. 15th Annual, 1999, pp. 129-133.
18. R. A. Botha and J. H. P. Eloff, "Access control in document-centric workflow systems-an agent-based approach, " Computers & Security, vol. 20, no. 6, pp. 525-532, 2001.
19. A. Motro, "An access authorization model for relational databases based on algebraic manipulation of view definitions, " in Data Engineering, 1989. Proceedings. Fifth International Conference on, 1989, pp. 339-347.
20. S. Rizvi, A. Mendelzon, S. Sudarshan, and P. Roy, "Extending query rewriting techniques for fine-grained access control, " in Proceedings of the 2004 ACM SIGMOD international conference on Management of data, 2004, pp. 551-562.
21. A. Rosenthal and E. Sciore, "View security as the basis for data warehouse security, " in Intl. Workshop on Design and Management of Data Warehouses, 2000.
22. A. Rosenthal, E. Sciore, and V. Doshi, "Security administration for federations, warehouses, and other derived data, " in Proceedings of the IFIP WG, 2000, vol. 11, pp. 209-223.