An Approach to Extract RBAC Models from BPEL4WS Processes

  • Authors:
  • Jan Mendling;Mark Strembeck;Gerald Stermsek;Gustaf Neumann

  • Affiliations:
  • Vienna University of Economics and BA, Austria;Vienna University of Economics and BA, Austria;Vienna University of Economics and BA, Austria;Vienna University of Economics and BA, Austria

  • Venue:
  • WETICE '04 Proceedings of the 13th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises
  • Year:
  • 2004

Quantified Score

Hi-index 0.00

Visualization

Abstract

The Business Process Execution Language for Web Services (BPEL) has become the defacto standard for Web Service composition. Yet, it does not address security aspects. This paper is concerned with access control for BPEL based processes. We present an approach to integrate Role-Based Access Control (RBAC) and BPEL on the meta-model level. Moreover, we show that such an integration can be used to automate steps of the role engineering process. In particular, we extract RBAC models from BPEL processes and present an XSLT converter that transforms BPEL code to the XML import format of the xoRBAC software component.