Managing access and flow control requirements in distributed workflows

  • Authors:
  • Samiha Ayed;Nora Cuppens-Boulahia;Frederic Cuppens

  • Affiliations:
  • Telecom Bretagne, 2 rue de la chataigneraie, Cesson Sévigné, 35510, France;Telecom Bretagne, 2 rue de la chataigneraie, Cesson Sévigné, 35510, France;Telecom Bretagne, 2 rue de la chataigneraie, Cesson Sévigné, 35510, France

  • Venue:
  • AICCSA '08 Proceedings of the 2008 IEEE/ACS International Conference on Computer Systems and Applications
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

Workflows are operational business processes. Workfow Management Systems (WFMS) are concerned with the control and coordination of these workflows. In recent years, there has been a trend to integrate WFMS in distributed inter-organizational systems. In this case malfunctioning of one WFMS can affect more than one organization, making the correct functioning of a WFMS a critical issue. Thus, an important function of WFMS is to enforce the security of these inter-organizational workflows. Several works have been done to integrate the security aspects in the workflow specification. Unfortunately, these research works generally adopt a centralized management approach and are based on static access control models. Therefore, they do not deal with flow control, a very important requirement in WFMS. In this paper, we suggest a decentralized and dynamic approach to handle a security policy in workflows taking into account access and flow control.