A policy-based authorization model for workflow-enabled dynamic process management

Although workflow has been widely used to support the modeling and execution of business process, the majority of current workflow management systems are not designed and suited for supporting dynamic business processes. One of the deficiencies is the inability to model realistically the organization of an enterprise to manage the dynamic human-centric business processes. A framework for workflow-enabled dynamic business process management is described in the paper. It includes an organizational model and an authorization model for supporting dynamic business processes. More specifically, authorization policies are expressed in an SQL-like language which can be easily rewritten into query sentences for execution. In addition, the framework supports dynamic integration and execution of multiple access control polices from disparate enterprise resources. Finally, a prototype implementation of the dynamic business process management framework is described.

[1]  Paul W. H. Chung,et al.  Knowledge-based process management - an approach to handling adaptive workflow , 2003, Knowl. Based Syst..

[2]  Akhil Kumar,et al.  A reference model for team-enabled workflow management systems , 2001, Data Knowl. Eng..

[3]  Wil M. P. van der Aalst,et al.  Workflow Patterns , 2004, Distributed and Parallel Databases.

[4]  Jörg Becker,et al.  Workflow Application Architectures: Classification and Characteristics of Workflow-based Information Systems , 2002 .

[5]  Jinjun Chen,et al.  Adaptive selection of necessary and sufficient checkpoints for dynamic verification of temporal constraints in grid workflow systems , 2007, TAAS.

[6]  Vijayalakshmi Atluri,et al.  A Petri net based safety analysis of workflow authorization models^1 , 2000 .

[7]  Michael zur Muehlen,et al.  Organizational Management in Workflow Applications - Issues and Perspectives , 2004, Inf. Technol. Manag..

[8]  Akhil Kumar,et al.  EROICA: A Rule-Based Approach to Organizational Policy Management in Workflow Systems , 2002, WAIM.

[9]  Ming-Chien Shan,et al.  Policies in a resource manager of workflow systems: modeling, enforcement and management , 1999, Proceedings 15th International Conference on Data Engineering (Cat. No.99CB36337).

[10]  Joachim Van den Bergh,et al.  The Process-Oriented Organisation: A Holistic View Developing a Framework for Business Process Orientation Maturity , 2007, BPM.

[11]  Duen-Ren Liu,et al.  Workflow modeling for virtual processes: an order-preserving process-view approach , 2003, Inf. Syst..

[12]  Jan H. P. Eloff,et al.  Separation of duties for access control enforcement in workflow environments , 2001, IBM Syst. J..

[13]  Jaeyong Shim,et al.  A framework for dynamic workflow interoperation using multi-subprocess task , 2002, Proceedings Twelfth International Workshop on Research Issues in Data Engineering: Engineering E-Commerce/E-Business Systems RIDE-2EC 2002.

[14]  Gwo-Hshiung Tzeng,et al.  Multi-criteria task assignment in workflow management systems , 2003, 36th Annual Hawaii International Conference on System Sciences, 2003. Proceedings of the.

[15]  Andreas Schaad,et al.  Modeling of Task-Based Authorization Constraints in BPMN , 2007, BPM.

[16]  Peter Lawrence.  Workflow Handbook 1997 , 1997 .

[17]  Jinjun Chen,et al.  A taxonomy of grid workflow verification and validation , 2008 .

[18]  Walter Rupietta.  Organization and role models for workflow processes , 1997 .

[19]  van der Wmp Wil Aalst,et al.  Dealing with workflow change: identification of issues and solutions , 2000 .

[20]  Matjaz B. Juric,et al.  Business process execution language for web services , 2004 .

[21]  Christoph Bussler,et al.  Organisationsverwaltung in Workflow-Management-Systemen , 1998 .

[22]  Nathaniel Palmer,et al.  Workflow Management Coalition , 2009, Encyclopedia of Database Systems.

[23]  Elisa Bertino,et al.  The specification and enforcement of authorization constraints in workflow management systems , 1999, TSEC.

[24]  Silvana Castano,et al.  Managing Workflow Authorization Constraints through Active Database Technology , 2001, Inf. Syst. Frontiers.

[25]  Christoph Bussler,et al.  Policy resolution for workflow management systems , 1994, Proceedings of the Twenty-Eighth Annual Hawaii International Conference on System Sciences.

[26]  Frank Leymann,et al.  Production Workflow: Concepts and Techniques , 1999 .

[27]  Antonio Cerone,et al.  Verifying BPEL Workflows Under Authorisation Constraints , 2006, Business Process Management.