InforLorV4, Main, Exploration, bibRecord, 002817

A logical framework for reasoning about delegation policies in workflow management systems

Identifieur interne : 002817 ( Main/Exploration ); précédent : 002816; suivant : 002818

A logical framework for reasoning about delegation policies in workflow management systems

Auteurs : Khaled Gaaloul [Luxembourg (pays)] ; H. A. Proper [Luxembourg (pays)] ; Ehtesham Zahoor [France] ; François Charoy [France] ; Claude Godart [France]

Source :

International journal of information and computer security : (Print) [ 1744-1765 ] ; 2011.

RBID : Pascal:12-0099272

Descripteurs français

Pascal (Inist)
- Programmation logique, Collecticiel, Workflow, Gestion entreprise, Gestion intégrée, Sécurité informatique, Système réactif, Gestion des droits numériques, Politique, Processus métier, Complétude, Modélisation, Contrôle accès, Analyse tâche.
Wicri :
- topic : Politique.

English descriptors

KwdEn :
- Access control, Business process, Completeness, Computer security, Digital rights management, Firm management, Groupware, Integrated management, Logical programming, Modeling, Policy, Reactive system, Task analysis, Workflow.
mix :
- access control, authorisation policy, business process security, event calculus, reasoning tools, reasoning tools., task delegation, workflow management.

Abstract

Task delegation presents one of the business process security leitmotifs. It defines a mechanism that bridges the gap between workflow and access control systems. Delegation completion and authorisation enforcement are specified under specific constraints so-called events. In this article, we aim to reason about delegation events to model task delegation and to specify delegation policies using a logical framework. To that end, we propose an event-based task delegation model to control the delegation execution. We then identify relevant events responsible for the dynamic enforcement of delegation policies. Further, we define a task-oriented access control model to specify delegation constraints into authorisation policies. Finally, we propose a technique to automate the delegation policies integration. Using event calculus, we develop a reasoning tool to control the delegation execution and to increase the compliance of all delegation changes in the existing policy of the workflow.

Url:

https://hal.inria.fr/hal-00677854

Affiliations:

Le document en format XML

<record><TEI><teiHeader><fileDesc><titleStmt><title xml:lang="en" level="a">A logical framework for reasoning about delegation policies in workflow management systems</title>
<author><name sortKey="Gaaloul, Khaled" sort="Gaaloul, Khaled" uniqKey="Gaaloul K" first="Khaled" last="Gaaloul">Khaled Gaaloul</name>
<affiliation wicri:level="1"><inist:fA14 i1="01"><s1>CRP Henri Tudor</s1>
<s2>1855 Luxembourg-Kirchberg</s2>
<s3>LUX</s3>
<sZ>1 aut.</sZ>
<sZ>2 aut.</sZ>
</inist:fA14>
<country>Luxembourg (pays)</country>
<wicri:noRegion>CRP Henri Tudor</wicri:noRegion>
</affiliation>
</author>
<author><name sortKey="Proper, H A" sort="Proper, H A" uniqKey="Proper H" first="H. A." last="Proper">H. A. Proper</name>
<affiliation wicri:level="1"><inist:fA14 i1="01"><s1>CRP Henri Tudor</s1>
<s2>1855 Luxembourg-Kirchberg</s2>
<s3>LUX</s3>
<sZ>1 aut.</sZ>
<sZ>2 aut.</sZ>
</inist:fA14>
<country>Luxembourg (pays)</country>
<wicri:noRegion>CRP Henri Tudor</wicri:noRegion>
</affiliation>
</author>
<author><name sortKey="Zahoor, Ehtesham" sort="Zahoor, Ehtesham" uniqKey="Zahoor E" first="Ehtesham" last="Zahoor">Ehtesham Zahoor</name>
<affiliation wicri:level="3"><inist:fA14 i1="02"><s1>LORIA, Nancy University, UMR 7503, BP 239</s1>
<s2>54506 Vandœuvre-lès-Nancy</s2>
<s3>FRA</s3>
<sZ>3 aut.</sZ>
<sZ>4 aut.</sZ>
<sZ>5 aut.</sZ>
</inist:fA14>
<country>France</country>
<placeName><region type="region" nuts="2">Grand Est</region>
<region type="old region" nuts="2">Lorraine (région)</region>
<settlement type="city">Vandœuvre-lès-Nancy</settlement>
</placeName>
</affiliation>
</author>
<author><name sortKey="Charoy, Francois" sort="Charoy, Francois" uniqKey="Charoy F" first="François" last="Charoy">François Charoy</name>
<affiliation wicri:level="3"><inist:fA14 i1="02"><s1>LORIA, Nancy University, UMR 7503, BP 239</s1>
<s2>54506 Vandœuvre-lès-Nancy</s2>
<s3>FRA</s3>
<sZ>3 aut.</sZ>
<sZ>4 aut.</sZ>
<sZ>5 aut.</sZ>
</inist:fA14>
<country>France</country>
<placeName><region type="region" nuts="2">Grand Est</region>
<region type="old region" nuts="2">Lorraine (région)</region>
<settlement type="city">Vandœuvre-lès-Nancy</settlement>
</placeName>
</affiliation>
</author>
<author><name sortKey="Godart, Claude" sort="Godart, Claude" uniqKey="Godart C" first="Claude" last="Godart">Claude Godart</name>
<affiliation wicri:level="3"><inist:fA14 i1="02"><s1>LORIA, Nancy University, UMR 7503, BP 239</s1>
<s2>54506 Vandœuvre-lès-Nancy</s2>
<s3>FRA</s3>
<sZ>3 aut.</sZ>
<sZ>4 aut.</sZ>
<sZ>5 aut.</sZ>
</inist:fA14>
<country>France</country>
<placeName><region type="region" nuts="2">Grand Est</region>
<region type="old region" nuts="2">Lorraine (région)</region>
<settlement type="city">Vandœuvre-lès-Nancy</settlement>
</placeName>
</affiliation>
</author>
</titleStmt>
<publicationStmt><idno type="wicri:source">INIST</idno>
<idno type="inist">12-0099272</idno>
<date when="2011">2011</date>
<idno type="stanalyst">PASCAL 12-0099272 INIST</idno>
<idno type="RBID">Pascal:12-0099272</idno>
<idno type="wicri:Area/PascalFrancis/Corpus">000123</idno>
<idno type="wicri:Area/PascalFrancis/Curation">000888</idno>
<idno type="wicri:Area/PascalFrancis/Checkpoint">000140</idno>
<idno type="wicri:explorRef" wicri:stream="PascalFrancis" wicri:step="Checkpoint">000140</idno>
<idno type="wicri:doubleKey">1744-1765:2011:Gaaloul K:a:logical:framework</idno>
<idno type="wicri:Area/Main/Merge">002864</idno>
<idno type="wicri:source">HAL</idno>
<idno type="RBID">Hal:hal-00677854</idno>
<idno type="url">https://hal.inria.fr/hal-00677854</idno>
<idno type="wicri:Area/Hal/Corpus">000717</idno>
<idno type="wicri:Area/Hal/Curation">000717</idno>
<idno type="wicri:Area/Hal/Checkpoint">001A22</idno>
<idno type="wicri:explorRef" wicri:stream="Hal" wicri:step="Checkpoint">001A22</idno>
<idno type="wicri:doubleKey">1744-1765:2011:Gaaloul K:a:logical:framework</idno>
<idno type="wicri:Area/Main/Merge">002014</idno>
<idno type="wicri:Area/Main/Curation">002817</idno>
<idno type="wicri:Area/Main/Exploration">002817</idno>
</publicationStmt>
<sourceDesc><biblStruct><analytic><title xml:lang="en" level="a">A logical framework for reasoning about delegation policies in workflow management systems</title>
<author><name sortKey="Gaaloul, Khaled" sort="Gaaloul, Khaled" uniqKey="Gaaloul K" first="Khaled" last="Gaaloul">Khaled Gaaloul</name>
<affiliation wicri:level="1"><inist:fA14 i1="01"><s1>CRP Henri Tudor</s1>
<s2>1855 Luxembourg-Kirchberg</s2>
<s3>LUX</s3>
<sZ>1 aut.</sZ>
<sZ>2 aut.</sZ>
</inist:fA14>
<country>Luxembourg (pays)</country>
<wicri:noRegion>CRP Henri Tudor</wicri:noRegion>
</affiliation>
</author>
<author><name sortKey="Proper, H A" sort="Proper, H A" uniqKey="Proper H" first="H. A." last="Proper">H. A. Proper</name>
<affiliation wicri:level="1"><inist:fA14 i1="01"><s1>CRP Henri Tudor</s1>
<s2>1855 Luxembourg-Kirchberg</s2>
<s3>LUX</s3>
<sZ>1 aut.</sZ>
<sZ>2 aut.</sZ>
</inist:fA14>
<country>Luxembourg (pays)</country>
<wicri:noRegion>CRP Henri Tudor</wicri:noRegion>
</affiliation>
</author>
<author><name sortKey="Zahoor, Ehtesham" sort="Zahoor, Ehtesham" uniqKey="Zahoor E" first="Ehtesham" last="Zahoor">Ehtesham Zahoor</name>
<affiliation wicri:level="3"><inist:fA14 i1="02"><s1>LORIA, Nancy University, UMR 7503, BP 239</s1>
<s2>54506 Vandœuvre-lès-Nancy</s2>
<s3>FRA</s3>
<sZ>3 aut.</sZ>
<sZ>4 aut.</sZ>
<sZ>5 aut.</sZ>
</inist:fA14>
<country>France</country>
<placeName><region type="region" nuts="2">Grand Est</region>
<region type="old region" nuts="2">Lorraine (région)</region>
<settlement type="city">Vandœuvre-lès-Nancy</settlement>
</placeName>
</affiliation>
</author>
<author><name sortKey="Charoy, Francois" sort="Charoy, Francois" uniqKey="Charoy F" first="François" last="Charoy">François Charoy</name>
<affiliation wicri:level="3"><inist:fA14 i1="02"><s1>LORIA, Nancy University, UMR 7503, BP 239</s1>
<s2>54506 Vandœuvre-lès-Nancy</s2>
<s3>FRA</s3>
<sZ>3 aut.</sZ>
<sZ>4 aut.</sZ>
<sZ>5 aut.</sZ>
</inist:fA14>
<country>France</country>
<placeName><region type="region" nuts="2">Grand Est</region>
<region type="old region" nuts="2">Lorraine (région)</region>
<settlement type="city">Vandœuvre-lès-Nancy</settlement>
</placeName>
</affiliation>
</author>
<author><name sortKey="Godart, Claude" sort="Godart, Claude" uniqKey="Godart C" first="Claude" last="Godart">Claude Godart</name>
<affiliation wicri:level="3"><inist:fA14 i1="02"><s1>LORIA, Nancy University, UMR 7503, BP 239</s1>
<s2>54506 Vandœuvre-lès-Nancy</s2>
<s3>FRA</s3>
<sZ>3 aut.</sZ>
<sZ>4 aut.</sZ>
<sZ>5 aut.</sZ>
</inist:fA14>
<country>France</country>
<placeName><region type="region" nuts="2">Grand Est</region>
<region type="old region" nuts="2">Lorraine (région)</region>
<settlement type="city">Vandœuvre-lès-Nancy</settlement>
</placeName>
</affiliation>
</author>
</analytic>
<series><title level="j" type="main">International journal of information and computer security : (Print)</title>
<idno type="ISSN">1744-1765</idno>
<imprint><date when="2011">2011</date>
</imprint>
</series>
</biblStruct>
</sourceDesc>
<seriesStmt><title level="j" type="main">International journal of information and computer security : (Print)</title>
<idno type="ISSN">1744-1765</idno>
</seriesStmt>
</fileDesc>
<profileDesc><textClass><keywords scheme="KwdEn" xml:lang="en"><term>Access control</term>
<term>Business process</term>
<term>Completeness</term>
<term>Computer security</term>
<term>Digital rights management</term>
<term>Firm management</term>
<term>Groupware</term>
<term>Integrated management</term>
<term>Logical programming</term>
<term>Modeling</term>
<term>Policy</term>
<term>Reactive system</term>
<term>Task analysis</term>
<term>Workflow</term>
</keywords>
<keywords scheme="Pascal" xml:lang="fr"><term>Programmation logique</term>
<term>Collecticiel</term>
<term>Workflow</term>
<term>Gestion entreprise</term>
<term>Gestion intégrée</term>
<term>Sécurité informatique</term>
<term>Système réactif</term>
<term>Gestion des droits numériques</term>
<term>Politique</term>
<term>Processus métier</term>
<term>Complétude</term>
<term>Modélisation</term>
<term>Contrôle accès</term>
<term>Analyse tâche</term>
</keywords>
<keywords scheme="Wicri" type="topic" xml:lang="fr"><term>Politique</term>
</keywords>
<keywords scheme="mix" xml:lang="en"><term>access control</term>
<term>authorisation policy</term>
<term>business process security</term>
<term>event calculus</term>
<term>reasoning tools</term>
<term>reasoning tools.</term>
<term>task delegation</term>
<term>workflow management</term>
</keywords>
</textClass>
</profileDesc>
</teiHeader>
<front><div type="abstract" xml:lang="en">Task delegation presents one of the business process security leitmotifs. It defines a mechanism that bridges the gap between workflow and access control systems. Delegation completion and authorisation enforcement are specified under specific constraints so-called events. In this article, we aim to reason about delegation events to model task delegation and to specify delegation policies using a logical framework. To that end, we propose an event-based task delegation model to control the delegation execution. We then identify relevant events responsible for the dynamic enforcement of delegation policies. Further, we define a task-oriented access control model to specify delegation constraints into authorisation policies. Finally, we propose a technique to automate the delegation policies integration. Using event calculus, we develop a reasoning tool to control the delegation execution and to increase the compliance of all delegation changes in the existing policy of the workflow.</div>
</front>
</TEI>
<affiliations><list><country><li>France</li>
<li>Luxembourg (pays)</li>
</country>
<region><li>Grand Est</li>
<li>Lorraine (région)</li>
</region>
<settlement><li>Vandœuvre-lès-Nancy</li>
</settlement>
</list>
<tree><country name="Luxembourg (pays)"><noRegion><name sortKey="Gaaloul, Khaled" sort="Gaaloul, Khaled" uniqKey="Gaaloul K" first="Khaled" last="Gaaloul">Khaled Gaaloul</name>
</noRegion>
<name sortKey="Proper, H A" sort="Proper, H A" uniqKey="Proper H" first="H. A." last="Proper">H. A. Proper</name>
</country>
<country name="France"><region name="Grand Est"><name sortKey="Zahoor, Ehtesham" sort="Zahoor, Ehtesham" uniqKey="Zahoor E" first="Ehtesham" last="Zahoor">Ehtesham Zahoor</name>
</region>
<name sortKey="Charoy, Francois" sort="Charoy, Francois" uniqKey="Charoy F" first="François" last="Charoy">François Charoy</name>
<name sortKey="Godart, Claude" sort="Godart, Claude" uniqKey="Godart C" first="Claude" last="Godart">Claude Godart</name>
</country>
</tree>
</affiliations>
</record>

Pour manipuler ce document sous Unix (Dilib)

EXPLOR_STEP=$WICRI_ROOT/Wicri/Lorraine/explor/InforLorV4/Data/Main/Exploration

HfdSelect -h $EXPLOR_STEP/biblio.hfd -nk 002817 | SxmlIndent | more

HfdSelect -h $EXPLOR_AREA/Data/Main/Exploration/biblio.hfd -nk 002817 | SxmlIndent | more

Pour mettre un lien sur cette page dans le réseau Wicri

{{Explor lien
   |wiki=    Wicri/Lorraine
   |area=    InforLorV4
   |flux=    Main
   |étape=   Exploration
   |type=    RBID
   |clé=     Pascal:12-0099272
   |texte=   A logical framework for reasoning about delegation policies in workflow management systems
}}

This area was generated with Dilib version V0.6.33.
Data generation: Mon Jun 10 21:56:28 2019. Site generation: Fri Feb 25 15:29:27 2022

Serveur d'exploration sur la recherche en informatique en Lorraine

A logical framework for reasoning about delegation policies in workflow management systems

A logical framework for reasoning about delegation policies in workflow management systems

Source :

Descripteurs français

English descriptors

Abstract

Links toward previous steps (curation, corpus...)

Le document en format XML

Pour manipuler ce document sous Unix (Dilib)

Pour mettre un lien sur cette page dans le réseau Wicri

	Serveur d'exploration sur la recherche en informatique en Lorraine
	Attention, ce site est en cours de développement ! Attention, site généré par des moyens informatiques à partir de corpus bruts. Les informations ne sont donc pas validées.