Integrating Security Patterns into the Electronic Invoicing Process

Abstract

Abstract-The increasing automation of business processes is one of the main benefits of the ongoing technological evolution. Regarding e-invoices this automation process is still not optimally supported despite the fact that recent studies indicate a high potential to save costs. Within this paper we identify the main obstacles and propose a multi-stage solution. Therein we classify the e-invoicing process using common security objectives and, since the process includes many security related elements, propose an initial solution based on security patterns. The approach takes advantage of the main benefits of security patterns to provide a domain-independent solution which is built upon expert knowledge.

Refining the Pattern-Based Reference Model for Electronic Invoices by Incorporating Threats

“…In our previous work [2], we analyzed the security aspects of the electronic invoice process, focusing on the affected security objectives. There we proposed an approach to relate security objectives to security patterns, leading to a set of patterns that can be used to realize a solution for the security problem.…”

“…Figure 3 (a) shows an extract of our classification scheme, presented in [2]. Therein security objectives are used to map appropriate security patterns to the e-invoice processes.…”

“…The refinement step aims to improve the classification scheme developed in [2]. This requires to analyse the set of security patterns for each part of the the e-invoice process.…”

“…Yet, implementing a valid and particularly secure electronic invoice process is a complex task and thus the majority of companies and especially small and medium-sized enterprises (SMEs) still rely on paper-based invoice processes. In earlier work [2] we have identified the main obstacles that hamper the comprehensive adoption of e-invoices.…”

“…In [2] we have proposed a methodology to discover a set of known patterns and thereby support the development of a reference model for the electronic invoice process. In this paper we try now to improve our methodology.…”