Title: Workflow authorisation in mediator-free environments

Authors: Mohamed Shehab, Elisa Bertino, Arif Ghafoor

Addresses: Department of Electrical and Computer Engineering and Center for Education and Research in Information Assurance and Security (CERIAS), Purdue University, West Lafayette, IN, USA. ' Department of Computer Science, Electrical and Computer Engineering and CERIAS, Purdue University, West Lafayette, IN, USA. ' Electrical and Computer Engineering and CERIAS, Purdue University, West Lafayette, IN, USA

Abstract: WorkFlow Management Systems (WFMS) coordinate and streamline business processes. Acquiring workflow authorisations and managing workflow authorisation constraints is a challenging problem. Current WFMSs assume a centralised global workflow authorisation model. In this paper, we propose a distributed workflow authorisation model with no central authorisation manager for a mediator-free environment. We provide an on-demand task discovery protocol that enables domains to discover tasks available in other domains. We formulate the workflow authorisation problem as a constraint satisfaction problem to select access paths that satisfy all the workflow authorisation constraints. We propose the Workflow Minimal Authorisation Problem (WMAP), which selects minimal authorisations required to execute the workflowtasks. In addition, we investigate access path overlaps to allow tasks in the same session to share authorisations and we present the Workflow Minimal Authorisation Problem with path Overlaps (WMAPO). Finally, we formulate integer programmes to solve both the WMAP and WMAPO.

Keywords: decentralised workflow authorisation; decentralised secure interoperability; task discovery; role-based access control; workflow management systems; networks; distributed WFMS; security; mediator-free environments; constraint satisfaction; access path overlaps.

DOI: 10.1504/IJSN.2006.010819

International Journal of Security and Networks, 2006 Vol.1 No.1/2, pp.2 - 12

Published online: 06 Sep 2006 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article