A policy-based authorization model for workflow-enabled dynamic process management

  • Authors:

  • Jian Cao;Jinjun Chen;Haiyan Zhao;Minglu Li

  • Affiliations:

  • Department of Computer Science and Engineering, Shanghai Jiaotong University, Shanghai 200240, PR China;Centre for Information Technology Research, Swinburne University of Technology, Australia;College of Computer and Electric Engineering, University of Shanghai for Science and Technology, Shanghai 200093, PR China;Department of Computer Science and Engineering, Shanghai Jiaotong University, Shanghai 200240, PR China

  • Venue:
  • Journal of Network and Computer Applications
  • Year:
  • 2009

Quantified Score

Hi-index 0.01

Visualization

Abstract

Although workflow has been widely used to support the modeling and execution of business process, the majority of current workflow management systems are not designed and suited for supporting dynamic business processes. One of the deficiencies is the inability to model realistically the organization of an enterprise to manage the dynamic human-centric business processes. A framework for workflow-enabled dynamic business process management is described in the paper. It includes an organizational model and an authorization model for supporting dynamic business processes. More specifically, authorization policies are expressed in an SQL-like language which can be easily rewritten into query sentences for execution. In addition, the framework supports dynamic integration and execution of multiple access control polices from disparate enterprise resources. Finally, a prototype implementation of the dynamic business process management framework is described.