Balancing Flexibility and Security in Adaptive Process Management Systems

Barbara Weber; Manfred Reichert; Werner Wild; Stefanie Rinderle

doi:10.1007/11575771_7

Balancing Flexibility and Security in Adaptive Process Management Systems

Barbara Weber, Manfred Reichert, Werner Wild, Stefanie Rinderle

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

34 Citations (Scopus)

146 Downloads (Pure)

Abstract

Process–aware information systems (PAIS) must provide sufficient flexibility to their users to support a broad spectrum of application scenarios. As a response to this need adaptive process management systems (PMS) have emerged, supporting both ad-hoc deviations from the predefined process schema and the quick adaptation of the PAIS to business process changes. This newly gained runtime flexibility, however, imposes challenging security issues as the PMS becomes more vulnerable to misuse. Process changes must be restricted to authorized users, but without nullifying the advantages of a flexible system by handling authorizations in a too rigid way. This paper discusses requirements relevant in this context and proposes a comprehensive access control (AC) model with special focus on adaptive PMS. On the one hand, our approach allows the compact definition of user dependent access rights restricting process changes to authorized users only. On the other hand, the definition of process type dependent access rights is supported to only allow for those change commands which are applicable within a particular process context. Respective AC mechanisms will be key ingredients in future adaptive PMS.

Original language	English
Title of host publication	On the Move to Meaningful Internet Systems 2005: CoopIS, DOA, and ODBASE
Subtitle of host publication	OTM Confederated International Conferences, CoopIS, DOA, and ODBASE 2005, Agia Napa, Cyprus, October 31 - November 4, 2005, Proceedings
Editors	Robert Meersman, Zahir Tari
Place of Publication	Berlin, Heidelberg
Publisher	Springer
Pages	59-76
Number of pages	18
ISBN (Electronic)	978-3-540-32116-3
ISBN (Print)	978-3-540-29736-9
DOIs	https://doi.org/10.1007/11575771_7
Publication status	Published - Oct 2005
Event	13th International Conference Cooperative Information Systems, CoopIS 2005 - Agia Napa, Cyprus, Greece Duration: 2 Nov 2005 → 4 Nov 2005 Conference number: 13

Publication series

Name	Lecture Notes in Computer Science
Publisher	Springer
Volume	3760
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	13th International Conference Cooperative Information Systems, CoopIS 2005
Abbreviated title	CoopIS
Country/Territory	Greece
City	Agia Napa, Cyprus
Period	2/11/05 → 4/11/05

Keywords

SCS-Services
Business process
Authorized user
Process type
Process instance
Access control model

Access to Document

10.1007/11575771_7

Weber2005balancingAccepted author version, 324 KB

Cite this

Weber, B., Reichert, M., Wild, W., & Rinderle, S. (2005). Balancing Flexibility and Security in Adaptive Process Management Systems. In R. Meersman, & Z. Tari (Eds.), On the Move to Meaningful Internet Systems 2005: CoopIS, DOA, and ODBASE: OTM Confederated International Conferences, CoopIS, DOA, and ODBASE 2005, Agia Napa, Cyprus, October 31 - November 4, 2005, Proceedings (pp. 59-76). (Lecture Notes in Computer Science; Vol. 3760). Springer. https://doi.org/10.1007/11575771_7

Weber, Barbara ; Reichert, Manfred ; Wild, Werner et al. / Balancing Flexibility and Security in Adaptive Process Management Systems. On the Move to Meaningful Internet Systems 2005: CoopIS, DOA, and ODBASE: OTM Confederated International Conferences, CoopIS, DOA, and ODBASE 2005, Agia Napa, Cyprus, October 31 - November 4, 2005, Proceedings. editor / Robert Meersman ; Zahir Tari. Berlin, Heidelberg : Springer, 2005. pp. 59-76 (Lecture Notes in Computer Science).

@inproceedings{d5d94e3179214cbb9152f8a922675a12,

title = "Balancing Flexibility and Security in Adaptive Process Management Systems",

abstract = "Process–aware information systems (PAIS) must provide sufficient flexibility to their users to support a broad spectrum of application scenarios. As a response to this need adaptive process management systems (PMS) have emerged, supporting both ad-hoc deviations from the predefined process schema and the quick adaptation of the PAIS to business process changes. This newly gained runtime flexibility, however, imposes challenging security issues as the PMS becomes more vulnerable to misuse. Process changes must be restricted to authorized users, but without nullifying the advantages of a flexible system by handling authorizations in a too rigid way. This paper discusses requirements relevant in this context and proposes a comprehensive access control (AC) model with special focus on adaptive PMS. On the one hand, our approach allows the compact definition of user dependent access rights restricting process changes to authorized users only. On the other hand, the definition of process type dependent access rights is supported to only allow for those change commands which are applicable within a particular process context. Respective AC mechanisms will be key ingredients in future adaptive PMS.",

keywords = "SCS-Services, Business process, Authorized user, Process type, Process instance, Access control model",

author = "Barbara Weber and Manfred Reichert and Werner Wild and Stefanie Rinderle",

year = "2005",

month = oct,

doi = "10.1007/11575771_7",

language = "English",

isbn = "978-3-540-29736-9",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "59--76",

editor = "Robert Meersman and Zahir Tari",

booktitle = "On the Move to Meaningful Internet Systems 2005: CoopIS, DOA, and ODBASE",

address = "Germany",

note = "13th International Conference Cooperative Information Systems, CoopIS 2005, CoopIS ; Conference date: 02-11-2005 Through 04-11-2005",

}

Weber, B, Reichert, M, Wild, W & Rinderle, S 2005, Balancing Flexibility and Security in Adaptive Process Management Systems. in R Meersman & Z Tari (eds), On the Move to Meaningful Internet Systems 2005: CoopIS, DOA, and ODBASE: OTM Confederated International Conferences, CoopIS, DOA, and ODBASE 2005, Agia Napa, Cyprus, October 31 - November 4, 2005, Proceedings. Lecture Notes in Computer Science, vol. 3760, Springer, Berlin, Heidelberg, pp. 59-76, 13th International Conference Cooperative Information Systems, CoopIS 2005, Agia Napa, Cyprus, Greece, 2/11/05. https://doi.org/10.1007/11575771_7

Balancing Flexibility and Security in Adaptive Process Management Systems. / Weber, Barbara; Reichert, Manfred; Wild, Werner et al.
On the Move to Meaningful Internet Systems 2005: CoopIS, DOA, and ODBASE: OTM Confederated International Conferences, CoopIS, DOA, and ODBASE 2005, Agia Napa, Cyprus, October 31 - November 4, 2005, Proceedings. ed. / Robert Meersman; Zahir Tari. Berlin, Heidelberg: Springer, 2005. p. 59-76 (Lecture Notes in Computer Science; Vol. 3760).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution › Academic › peer-review

TY - GEN

T1 - Balancing Flexibility and Security in Adaptive Process Management Systems

AU - Weber, Barbara

AU - Reichert, Manfred

AU - Wild, Werner

AU - Rinderle, Stefanie

N1 - Conference code: 13

PY - 2005/10

Y1 - 2005/10

N2 - Process–aware information systems (PAIS) must provide sufficient flexibility to their users to support a broad spectrum of application scenarios. As a response to this need adaptive process management systems (PMS) have emerged, supporting both ad-hoc deviations from the predefined process schema and the quick adaptation of the PAIS to business process changes. This newly gained runtime flexibility, however, imposes challenging security issues as the PMS becomes more vulnerable to misuse. Process changes must be restricted to authorized users, but without nullifying the advantages of a flexible system by handling authorizations in a too rigid way. This paper discusses requirements relevant in this context and proposes a comprehensive access control (AC) model with special focus on adaptive PMS. On the one hand, our approach allows the compact definition of user dependent access rights restricting process changes to authorized users only. On the other hand, the definition of process type dependent access rights is supported to only allow for those change commands which are applicable within a particular process context. Respective AC mechanisms will be key ingredients in future adaptive PMS.

AB - Process–aware information systems (PAIS) must provide sufficient flexibility to their users to support a broad spectrum of application scenarios. As a response to this need adaptive process management systems (PMS) have emerged, supporting both ad-hoc deviations from the predefined process schema and the quick adaptation of the PAIS to business process changes. This newly gained runtime flexibility, however, imposes challenging security issues as the PMS becomes more vulnerable to misuse. Process changes must be restricted to authorized users, but without nullifying the advantages of a flexible system by handling authorizations in a too rigid way. This paper discusses requirements relevant in this context and proposes a comprehensive access control (AC) model with special focus on adaptive PMS. On the one hand, our approach allows the compact definition of user dependent access rights restricting process changes to authorized users only. On the other hand, the definition of process type dependent access rights is supported to only allow for those change commands which are applicable within a particular process context. Respective AC mechanisms will be key ingredients in future adaptive PMS.

KW - SCS-Services

KW - Business process

KW - Authorized user

KW - Process type

KW - Process instance

KW - Access control model

U2 - 10.1007/11575771_7

DO - 10.1007/11575771_7

M3 - Conference contribution

SN - 978-3-540-29736-9

T3 - Lecture Notes in Computer Science

SP - 59

EP - 76

BT - On the Move to Meaningful Internet Systems 2005: CoopIS, DOA, and ODBASE

A2 - Meersman, Robert

A2 - Tari, Zahir

PB - Springer

CY - Berlin, Heidelberg

T2 - 13th International Conference Cooperative Information Systems, CoopIS 2005

Y2 - 2 November 2005 through 4 November 2005

ER -

Weber B, Reichert M, Wild W, Rinderle S. Balancing Flexibility and Security in Adaptive Process Management Systems. In Meersman R, Tari Z, editors, On the Move to Meaningful Internet Systems 2005: CoopIS, DOA, and ODBASE: OTM Confederated International Conferences, CoopIS, DOA, and ODBASE 2005, Agia Napa, Cyprus, October 31 - November 4, 2005, Proceedings. Berlin, Heidelberg: Springer. 2005. p. 59-76. (Lecture Notes in Computer Science). doi: 10.1007/11575771_7

Balancing Flexibility and Security in Adaptive Process Management Systems

Abstract

Publication series

Conference

Keywords

Access to Document

Fingerprint

Cite this