A Secure Task Delegation Model for Workflows

Abstract : Workflow management systems provide some of the required technical means to preserve integrity, confidentiality and availability at the control-, data- and task assignment layers of a workflow. We currently observe a move away from predefined strict workflow enforcement approaches towards supporting exceptions which are difficult to foresee when modelling a workflow. One specific approach for exception handling is that of task delegation. The delegation of a task from one principal to another, however, has to be managed and executed in a secure way, in this context implying the presence of a fixed set of delegation events. In this paper, we propose first and foremost, a secure task delegation model within a workflow. The novel part of this model is separating the various aspects of delegation with regards tousers, tasks, events and data, portraying them in terms of a multi-layered state machine. We then define delegation scenarios and analyse additional requirements to support secure task delegation over these layers. Moreover, we detail a delegation protocol with a specific focus on the initial negotiation steps between the involved principals.
Type de document :
Communication dans un congrès
The Second International Conference on Emerging Security Information, Systems and Technologies - SECURWARE 2008, Aug 2008, St Raphael, France. IEEE, pp.10-15, 2008, 〈10.1109/SECURWARE.2008.21〉
Liste complète des métadonnées

Littérature citée [13 références]  Voir  Masquer  Télécharger

https://hal.inria.fr/inria-00334755
Contributeur : Khaled Gaaloul <>
Soumis le : mardi 28 octobre 2008 - 14:06:34
Dernière modification le : jeudi 11 janvier 2018 - 06:19:48
Document(s) archivé(s) le : lundi 7 juin 2010 - 22:07:50

Fichier

gaaloul-SecureTaskDelegation.p...
Fichiers produits par l'(les) auteur(s)

Identifiants

Collections

Citation

Khaled Gaaloul, Andreas Schaad, Ulrich Flegel, François Charoy. A Secure Task Delegation Model for Workflows. The Second International Conference on Emerging Security Information, Systems and Technologies - SECURWARE 2008, Aug 2008, St Raphael, France. IEEE, pp.10-15, 2008, 〈10.1109/SECURWARE.2008.21〉. 〈inria-00334755〉

Partager

Métriques

Consultations de la notice

188

Téléchargements de fichiers

329