Databases Reference
In-Depth Information
T
3
: Issue
Check
bs
bs
T
1
: Prepare
Claim
T
2
: Approve
Claim
Authorized Role:
Clerk
bf
Authorized Role:
Employee
Authorized Role:
Supervisor
T
4
: Notify
Employee
Authorized Role:
Clerk
Fig. 1.
Example Workflow
means that the next task begins if the previous task successfully completes.
The task dependency “bf” means that the next task begins if the previous task
completes in failure. A check will be issued (
T
3
) if the claim is approved (
T
2
is completed in success). Otherwise, the employee will be sent a notification
(
T
4
).
Each task is also associated with processing entities who are authorized to
perform the task. Specifically, task
T
1
can be executed by any employee, task
T
2
must be executed by a supervisor, and tasks
T
3
and
T
4
are to be executed
by clerks.
Workflow or business process management systems are widely available as
complete systems or software that can be added to other systems in order
to integrate them. Major providers of business process management systems
include SAP NetWeaver, Bea's WebLogic Integration, Sunguard Carnot, IBM
FlowMark, Intalio BPMS, Lombari TeamWorks, Seagull LegaSuite, Oracle
BPEL, Savvion Business Manager, and Ultimus BPM. Features include design
and lay-out of workflow including creation of rules for task assignment such
as those shown in the example with which assignments of tasks can be made
based on individual authorization, group authorization or role.
2 Security Requirements in Workflow Systems
In addition to the traditional security requirements such as confidentiality,
integrity, availability and authentication, a number of security measures need
to be taken into account while building a secure workflow system. In the
following, we enumerate these and discuss the issues and solutions proposed
by researchers in the following sections.
•
Authorization
- Refers to enforcing access control to ensure only autho-
rized individuals/roles are allowed to execute tasks within a workflow by
adhering to the workflow dependencies
