Virtual Organisations (VOs) are collaborative environments, encompassing different autonomous partners responding to a business opportunity with a focus on automation and flexibility. These are the sort of scenarios researched specifically in the EU IST project TrustCoM. Collaborative business processes are identified as the integrating component bringing together other required VO components and subsystems such as a policy infrastructure or contract management while still meeting the requirements regarding flexibility. eBusiness in such a complex, evolving environment as the one encountered in VOs can only prosper with an integrated security model, supporting various classes of VOs or catering for VOs forming in different business segments, for instance aggregated service provisioning or collaborative engineering. Such an integrated security model has to take the integrating component, collaborative business processes into account as well. This contribution deals particularly with the security model on the VO’s enterprise layer. A business process model, offering means to controllably expose organisation internal processes is extended to interface with other security and contract management related VO subsystems (such as the policy infrastructure). The extended business process model supports process context aware security controls for and towards those subsystems within executable collaborative process instances.
[1]
Shing-Chi Cheung,et al.
Workflow View Driven Cross-Organizational Interoperability in a Web Service Environment
,
2004,
Inf. Technol. Manag..
[2]
Maria E. Orlowska,et al.
Towards a Cross-Organizational Workflow Model
,
2002,
PRO-VE.
[3]
Thomas A. Mikalsen,et al.
Composition of Coordinated Web Services
,
2004,
Middleware.
[4]
Duen-Ren Liu,et al.
Workflow modeling for virtual processes: an order-preserving process-view approach
,
2003,
Inf. Syst..
[5]
Mark Strembeck,et al.
An approach to extract RBAC models from BPEL4WS processes
,
2004,
13th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises.
[6]
Ravi S. Sandhu,et al.
Task-Based Authorization Controls (TBAC): A Family of Models for Active and Enterprise-Oriented Autorization Management
,
1997,
DBSec.