Please use this identifier to cite or link to this item: http://hdl.handle.net/1959.14/191924
11 Visitors
12 Hits
0 Downloads
- Title
- SOAC-Net : a model to manage service-based business process authorization
- Related
- IEEE International Conference on Services Computing (9th : 2012) (24 - 29 June 2012 : Honolulu, Hawaii, USA)
- Related
- Moser, Louise; Parashar, Manish and Hung Patrick. 2012 IEEE Ninth International Conference on Services Computing : SCC 2012 : proceedings : 24-29 June 2012, Honolulu, Hawaii, USA, p.376-383
- DOI
- 10.1109/SCC.2012.37
- Publisher
- Piscataway, NJ : IEEE
- Date
- 2012
- Author/Creator
- Sun, Haiyang
- Author/Creator
- Yang, Jian
- Author/Creator
- Zhao, Weiliang
- Author/Creator
- Nepal, Surya
- Description
- Business process (BP) can be supported by a large number of resources with evolving contents. In order to receive the support from these resources, the BP must satisfy the authorization policies of these resources. On the other hand, a BP also has its own authorization policies that users must satisfy in order to interact with the BP. Meanwhile, execution policies need to be applied to manage the sequence of tasks invocations in a BP. Therefore, without proper coordination among these policies, BP may not be able to perform correctly, e.g., imperative support from a specific resource could be missing or unauthorized user access can occur. An effective authorization management bringing all types of policies together becomes a must for a BP executing correctly without breaking any authorization and business rules. In this paper, we propose a process model, SOAC-Net that is incorporated with an authorization model, Process-Aware Service-Oriented Authorization Control (PASOAC). PASOAC is an extension of Role Based Access Control (RBAC), which takes both resource and user into account. A set of authorization constraints are designed in PASOAC to coordinate the user access and the resource support in a process environment.
- Description
- 8 page(s)
- Subject Keyword
- Authorization
- Subject Keyword
- Business Process
- Subject Keyword
- Authorization Policy
- Resource Type
- conference paper
- Organisation
- Macquarie University. Dept. of Computing
- Identifier
- http://hdl.handle.net/1959.14/191924
- Identifier
- ISBN:9781467330497
- Identifier
- mq_res-ext-ieee20120928343-27
- Language
- eng
- Reviewed
