Dynamic Authorisation Policies for Event-based Task Delegation - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Communication Dans Un Congrès Année : 2010

Dynamic Authorisation Policies for Event-based Task Delegation

Khaled Gaaloul
  • Fonction : Auteur
  • PersonId : 864631
Ehtesham Zahoor
  • Fonction : Auteur
  • PersonId : 855182
François Charoy
Claude Godart
  • Fonction : Auteur
  • PersonId : 830462
  • IdRef : 031091733

Résumé

Task delegation presents one of the business process security leitmotifs. It denes a mechanism that bridges the gap between both workfow and access control systems. There are two important issues relating to delegation, namely allowing task delegation to complete, and having a secure delegation within a workfow. Delegation completion and authorisation enforcement are specied under specic constraints. Constraints are dened from the delegation context implying the presence of a xed set of delegation events to control the delegation execution. In this paper, we aim to reason about delegation events to specify delegation policies dynamically. To that end, we present an event-based task delegation model to monitor the delegation process. We then identify relevant events for authorisation enforcement to specify delegation policies. Moreover, we propose a technique that automates delegation policies using event calculus to control the delegation execution and increase the compliance of all delegation changes in the global policy.
Fichier principal
Vignette du fichier
kgaaloul_caise10.pdf (246.37 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

inria-00466220 , version 1 (23-03-2010)

Identifiants

  • HAL Id : inria-00466220 , version 1

Citer

Khaled Gaaloul, Ehtesham Zahoor, François Charoy, Claude Godart. Dynamic Authorisation Policies for Event-based Task Delegation. The 22nd International Conference on Advanced Information Systems Engineering - CAiSE'10, Jun 2010, Hammamet, Tunisia. ⟨inria-00466220⟩
121 Consultations
195 Téléchargements

Partager

Gmail Facebook X LinkedIn More