Process driven access control and authorization approach

Authors: Kasse, J., Xu, L., De Vrieze, P. and Bai, Y.

http://eprints.bournemouth.ac.uk/31835/

Start date: 25 February 2019

Journal: Springer Advances in Intelligent Systems and Computing

Publisher: Springer

Compliance to regulatory requirements is key to successful collaborative business process execution. The review the EU general data protection regulation (GDPR) brought to the fore the need to comply with data privacy. Access control and authorization mechanisms in workflow management systems based on roles, tasks and attributes do not sufficiently address the current complex and dynamic privacy requirements in collaborative business process environments due to diverse policies. This paper proposes process driven authorization as an alternative approach to data access control and authorization where access is granted based on legitimate need to accomplish a task in the business process. Due to vast sources of regulations, a mechanism to derive and validate a composite set of constraints free of conflicts and contradictions is presented. An extended workflow tree language is also presented to support constraint modeling. An industry case Pick and Pack process is used for illustration.

This data was imported from Scopus:

Authors: Kasse, J.P., Xu, L., Devrieze, P. and Bai, Y.

http://eprints.bournemouth.ac.uk/31835/

Journal: Advances in Intelligent Systems and Computing

Volume: 1041

Pages: 313-322

eISSN: 2194-5365

ISBN: 9789811506369

ISSN: 2194-5357

DOI: 10.1007/978-981-15-0637-6_26

© Springer Nature Singapore Pte Ltd. 2020. Compliance to regulatory requirements is key to successful collaborative business process execution. The review of the EU General Data Protection Regulation (GDPR) brought to the fore the need to comply with data privacy. Access control and authorization mechanisms in workflow management systems based on roles, tasks, and attributes do not sufficiently address the current complex and dynamic privacy requirements in collaborative business process environments due to diverse policies. This paper proposes process driven authorization as an alternative approach to data access control and authorization where access is granted based on a legitimate need to accomplish a task in the business process. Due to vast sources of regulations, a mechanism to derive and validate a composite set of constraints free of conflicts and contradictions is presented. An extended workflow tree language is also presented to support constraint modeling. An industry case pick and pack process is used for illustration.

The data on this page was last updated at 13:55 on February 25, 2020.