Architecting Access Control for Business Processes in the Cloud

Abstract

Enterprise architecture (EA) aims to provide management with appropriate indicators and controls to steer and model service-oriented enterprises. Nevertheless, common enterprises architecture frameworks lack of access control mechanisms supporting security requirements within organizations. Moreover, the rapid permeation of information technology motivates new computing paradigms such as cloud computing. In this paper, we propose an approach for modeling access control requirements in enterprise architecture, and supporting its provisioning in Cloud providers. The idea is to leverage EA paradigms to ensure business-IT alignment when modeling access control, and deploying access control mechanisms in the Cloud. Our approach is illustrated through the handling of an e-Government scenario, in which EA modeling and appropriate Cloud resources provisioning are motivated.