Modeling Support for Role-Based Delegation in Process-Aware Information Systems |
| |
Authors: | Dr Sigrid Schefer-Wenzl Prof Dr Mark Strembeck |
| |
Institution: | 1. Institute for Information Systems and New Media, WU Vienna, 1090, Vienna, Austria 2. Competence Center for IT-Security, University of Applied Sciences Campus Vienna, 1090, Vienna, Austria
|
| |
Abstract: | In the paper, an integrated approach for the modeling and enforcement of delegation policies in process-aware information systems is presented. In particular, a delegation extension for process-related role-based access control (RBAC) models is specified. The extension is generic in the sense that it can be used to extend process-aware information systems or process modeling languages with support for process-related RBAC delegation models. Moreover, the detection of delegation-related conflicts is discussed and a set of pre-defined resolution strategies for each potential conflict is provided. Thereby, the design-time and runtime consistency of corresponding RBAC delegation models can be ensured. Based on a formal metamodel, UML2 modeling support for the delegation of roles, tasks, and duties is provided. A corresponding case study evaluates the practical applicability of the approach with real-world business processes. Moreover, the approach is implemented as an extension to the BusinessActivity library and runtime engine. |
| |
Keywords: | |
本文献已被 SpringerLink 等数据库收录! |
|