Secure Business Processes in Service-Oriented Architectures -- A Requirements Analysis

Müller, Jens; Mülle, Jutta A.; Stackelberg, Silvia von; Böhm, Klemens

doi:10.1109/ecows.2010.24

Cited by 5 publications

(1 citation statement)

References 24 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…For example, choosing which third parties data is sent to can be up to the user performing a certain task in the process. A specification that is the basis for such decisions must be expressed in a form based on BP state and context [8]. There exists a proposal for an architecture of a business-process management system (BPMS) that takes context into account and allows respective configuration [10].…”

Section: Fundamentalsmentioning

confidence: 99%

A Graphical Audit Facility for Data Processing and Its Evaluation with Users

Müller

Kavak

Böhm

2012

Web Technologies and Applications

View full text Add to dashboard Cite

Abstract. Personally-identifiable information (PII) is increasingly processed in a distributed way. This makes it much harder for individuals to oversee how their PII is used. In the legal systems of many countries, processing of PII is subject to restrictions. In particular, companies have to inform an individual on how they use his PII, and which external parties they transfer it to. We hypothesize that naïve approaches like log messages or plain text are not sufficient to this end. We in turn have developed a user-friendly auditing facility based on business processes (BPs). It visualizes data processing in real time, using the graphical process models one would deploy on a BP engine for execution. We also propose an approach to let a BP-management system generate the necessary audit events at runtime. An evaluation of realistic scenarios with users shows that our tool helps them to understand how their PII is used.

show abstract

Section: Fundamentalsmentioning

confidence: 99%

A Graphical Audit Facility for Data Processing and Its Evaluation with Users

Müller

Kavak

Böhm

2012

Web Technologies and Applications

View full text Add to dashboard Cite

show abstract

A Voucher-Based Security Middleware for Secure Business Process Outsourcing

Beni

Lagaisse

Zhang

et al. 2017

Lecture Notes in Computer Science

View full text Add to dashboard Cite

Business Process Outsourcing (BPO) enables the delegation of entire business processes to third party providers. Such scenarios involve communication between federated and heterogenous workflow engines. However, state-of-the-art workflow engines fall short of a distributed authorisation mechanism for this heterogenous, federated BPO setting. In a cross-organisational context, the security requirements involve (i) delegation and verification of privileges in a confidential manner, (ii) secure asynchronous operations during the long-term workflows even when the users are logged-off, and (iii) controlling access to interfaces of the different workflow engines involved. To address these challenges, we present a voucher-based authorisation architecture and middleware. We extended the WF-Interop [ ] middleware with a security module to support this authorisation architecture. We further validated our contributions by prototyping a billing workflow case study on top of the extended WF-Interop middleware and evaluated the performance overhead of the security extensions to the middleware.

show abstract

The Architecture of a Secure Business-Process-Management System in Service-Oriented Environments

Müller

Böhm

2011

2011 IEEE Ninth European Conference on Web Services

View full text Add to dashboard Cite

Secure Business Processes in Service-Oriented Architectures -- A Requirements Analysis

Cited by 5 publications

References 24 publications

A Graphical Audit Facility for Data Processing and Its Evaluation with Users

A Graphical Audit Facility for Data Processing and Its Evaluation with Users

A Voucher-Based Security Middleware for Secure Business Process Outsourcing

The Architecture of a Secure Business-Process-Management System in Service-Oriented Environments

Contact Info

Product

Resources

About