Task Delegation Based Access Control Models for Workflow Systems

International audiencee-Government organisations are facilitated and conducted using workflow management systems. Role-based access control (RBAC) is recognised as an efficient access control model for large organisations. The application of RBAC in workflow systems cannot, however, grant permissions to users dynamically while business processes are being executed. We currently observe a move away from predefined strict workflow modelling towards approaches supporting flexibility on the organisational level. One specific approach is that of task delegation. Task delegation is a mechanism that supports organisational flexibility, and ensures delegation of authority in access control systems. In this paper, we propose a Task-oriented Access Control (TAC) model based on RBAC to address these requirements. We aim to reason about task from organisational perspectives and resources perspectives to analyse and specify authorisation constraints. Moreover, we present a fine grained access control protocol to support delegation based on the TAC model

Context-Based Handling of Mobile Process Activities

Process technology constitutes a crucial component of information systems. In this context, high flexibility is required as business functions must be quickly adaptable to cope with dynamic business changes. As recent developments allow for the use of mobile devices in knowledge-intensive areas, it is often demanded to enhance process-aware information systems with mobile activity support. In general, the technical integration of this activity type with existing process management technology is challenging. For example, protocols governing the communication between mobile devices and process management systems must be adapted. If a mobile context shall be additionally considered, the integration gets even more complex. However, the use of a mobile context offers advantages. For example, the mobile activity execution time may be decreased if mobile activities are only assigned to those users whose location is beneficial. This chapter proposes an approach to enable the robust handling of single process activities on mobile devices based on a mobile process model

Integrating Mobile Tasks with Business Processes: A Self-Healing Approach

Process management technology constitutes a fundamental component of any service-driven computing environment. Process management facilitates both the composition of services at design time and their orchestration at run time. In particular, when applying the service paradigm to enterprise integration management, high flexibility is required. In this context, atomic as well as composite services representing the business functions should be quickly adaptable to cope with dynamic business changes. Furthermore, they should enable mobile and quick access to enterprise information. The growing maturity of smart mobile devices has fostered their prevalence in knowledge-intensive areas in the enterprise as well. As a consequence, process management technology needs to be enhanced with mobile task support. However, tasks hitherto executed stationarily, cannot be simply transferred in order to run on smart mobile devices. Many research groups focus on the partitioning of processes and the distributed execution of the resulting fragments on smart mobile devices. Opposed to this fragmentation concept, this chapter proposes an approach to enable the robust and flexible execution of single process tasks on smart mobile devices by provisioning self-healing techniques to address the smooth integration of mobile tasks with business processes

Collaboration Support Through Mobile Processes and Entailment Constraints

The computational capability of smart mobile devices increasingly fosters their prevalence in many business domains. Along this trend, process management technology is going to be enhanced with mobile task support. However, tasks executed stationarily so far cannot be simply transfered to mobile devices. For the latter purpose, we developed an approach within the MARPLE project enabling mobile and robust task execution in the context of business processes. In particular, this approach provides self-healing techniques that relieve mobile users from manually handling errors (e.g., lost connections) during mobile task execution. In this paper, we extend the collaboration facilities of our approach by adding entailment constraints to mobile task management. In the context of a business process, for example, two tasks may have to be executed by the same (mobile) user. Related research on integrating such constraints with business processes has received growing attention recently. However, realizing entailment constraints in the context of mobile processes and tasks raises additional issues, which must be probably integrated with the mentioned error handling techniques. We present fundamental entailment constraints supported by our approach and discuss how they can be realized in a robust and flexible manner. In particular, this will significantly enhance mobile task and process support in next generation information systems