Balancing Flexibility and Security in Adaptive Process Management Systems

B. Weber, M.U. Reichert, W. Wild, S.B. Rinderle

    Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

    30 Citations (Scopus)
    44 Downloads (Pure)

    Abstract

    Process–aware information systems (PAIS) must provide sufficient flexibility to their users to support a broad spectrum of application scenarios. As a response to this need adaptive process management systems (PMS) have emerged, supporting both ad-hoc deviations from the predefined process schema and the quick adaptation of the PAIS to business process changes. This newly gained runtime flexibility, however, imposes challenging security issues as the PMS becomes more vulnerable to misuse. Process changes must be restricted to authorized users, but without nullifying the advantages of a flexible system by handling authorizations in a too rigid way. This paper discusses requirements relevant in this context and proposes a comprehensive access control (AC) model with special focus on adaptive PMS. On the one hand, our approach allows the compact definition of user dependent access rights restricting process changes to authorized users only. On the other hand, the definition of process type dependent access rights is supported to only allow for those change commands which are applicable within a particular process context. Respective AC mechanisms will be key ingredients in future adaptive PMS.
    Original languageEnglish
    Title of host publicationOn the Move to Meaningful Internet Systems 2005: CoopIS, DOA, and ODBASE
    Subtitle of host publicationOTM Confederated International Conferences, CoopIS, DOA, and ODBASE 2005, Agia Napa, Cyprus, October 31 - November 4, 2005, Proceedings
    EditorsRobert Meersman, Zahir Tari
    Place of PublicationBerlin, Heidelberg
    PublisherSpringer
    Pages59-76
    Number of pages18
    ISBN (Electronic)978-3-540-32116-3
    ISBN (Print)978-3-540-29736-9
    DOIs
    Publication statusPublished - Oct 2005
    Event13th International Conference Cooperative Information Systems, CoopIS 2005 - Agia Napa, Cyprus, Greece
    Duration: 2 Nov 20054 Nov 2005
    Conference number: 13

    Publication series

    NameLecture Notes in Computer Science
    PublisherSpringer
    Volume3760
    ISSN (Print)0302-9743
    ISSN (Electronic)1611-3349

    Conference

    Conference13th International Conference Cooperative Information Systems, CoopIS 2005
    Abbreviated titleCoopIS
    CountryGreece
    CityAgia Napa, Cyprus
    Period2/11/054/11/05

    Keywords

    • SCS-Services
    • Business process
    • Authorized user
    • Process type
    • Process instance
    • Access control model

    Fingerprint Dive into the research topics of 'Balancing Flexibility and Security in Adaptive Process Management Systems'. Together they form a unique fingerprint.

  • Cite this

    Weber, B., Reichert, M. U., Wild, W., & Rinderle, S. B. (2005). Balancing Flexibility and Security in Adaptive Process Management Systems. In R. Meersman, & Z. Tari (Eds.), On the Move to Meaningful Internet Systems 2005: CoopIS, DOA, and ODBASE: OTM Confederated International Conferences, CoopIS, DOA, and ODBASE 2005, Agia Napa, Cyprus, October 31 - November 4, 2005, Proceedings (pp. 59-76). (Lecture Notes in Computer Science; Vol. 3760). Berlin, Heidelberg: Springer. https://doi.org/10.1007/11575771_7