Dynamic authorisation policies for event-based task delegation

  • Authors:
  • Khaled Gaaloul;Ehtesham Zahoor;François Charoy;Claude Godart

  • Affiliations:
  • LORIA, Nancy University, UMR, Vandœuvre-lès-Nancy Cedex, France;LORIA, Nancy University, UMR, Vandœuvre-lès-Nancy Cedex, France;LORIA, Nancy University, UMR, Vandœuvre-lès-Nancy Cedex, France;LORIA, Nancy University, UMR, Vandœuvre-lès-Nancy Cedex, France

  • Venue:
  • CAiSE'10 Proceedings of the 22nd international conference on Advanced information systems engineering
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Task delegation presents one of the business process security leitmotifs. It defines a mechanism that bridges the gap between both workflow and access control systems. There are two important issues relating to delegation, namely allowing task delegation to complete, and having a secure delegation within a workflow. Delegation completion and authorisation enforcement are specified under specific constraints. Constraints are defined from the delegation context implying the presence of a fixed set of delegation events to control the delegation execution. In this paper, we aim to reason about delegation events to specify delegation policies dynamically. To that end, we present an event-based task delegation model to monitor the delegation process. We then identify relevant events for authorisation enforcement to specify delegation policies. Moreover, we propose a technique that automates delegation policies using event calculus to control the delegation execution and increase the compliance of all delegation changes in the global policy.