一种从BPEL4WS流程中提取RBAC模型的方法

13th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises Pub Date : 2004-06-14 DOI:10.1109/ENABL.2004.9

J. Mendling, Mark Strembeck, Gerald Stermsek, G. Neumann

{"title":"一种从BPEL4WS流程中提取RBAC模型的方法","authors":"J. Mendling, Mark Strembeck, Gerald Stermsek, G. Neumann","doi":"10.1109/ENABL.2004.9","DOIUrl":null,"url":null,"abstract":"The Business Process Execution Language for Web services (BPEL) has become the defacto standard for Web service composition. Yet, it does not address security aspects. This paper is concerned with access control for BPEL based processes. We present an approach to integrate role-based access control (RBAC) and BPEL on the meta-model level. Moreover, we show that such integration can be used to automate steps of the role engineering process. In particular, we extract RBAC models from BPEL processes and present an XSLT converter that transforms BPEL code to the XML import format of the xoRBAC software component.","PeriodicalId":391459,"journal":{"name":"13th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises","volume":"79 1-2 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2004-06-14","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"59","resultStr":"{\"title\":\"An approach to extract RBAC models from BPEL4WS processes\",\"authors\":\"J. Mendling, Mark Strembeck, Gerald Stermsek, G. Neumann\",\"doi\":\"10.1109/ENABL.2004.9\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"The Business Process Execution Language for Web services (BPEL) has become the defacto standard for Web service composition. Yet, it does not address security aspects. This paper is concerned with access control for BPEL based processes. We present an approach to integrate role-based access control (RBAC) and BPEL on the meta-model level. Moreover, we show that such integration can be used to automate steps of the role engineering process. In particular, we extract RBAC models from BPEL processes and present an XSLT converter that transforms BPEL code to the XML import format of the xoRBAC software component.\",\"PeriodicalId\":391459,\"journal\":{\"name\":\"13th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises\",\"volume\":\"79 1-2 1\",\"pages\":\"0\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"2004-06-14\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"59\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"13th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://doi.org/10.1109/ENABL.2004.9\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"13th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1109/ENABL.2004.9","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}

引用次数: 59

摘要

用于Web服务的业务流程执行语言(BPEL)已经成为Web服务组合的事实上的标准。然而，它没有解决安全方面的问题。本文关注基于BPEL的流程的访问控制。我们提出了一种在元模型级别上集成基于角色的访问控制(RBAC)和BPEL的方法。此外，我们还展示了这种集成可以用于自动化角色工程过程的步骤。特别是，我们从BPEL流程中提取RBAC模型，并提供一个XSLT转换器，将BPEL代码转换为xoRBAC软件组件的XML导入格式。

本文章由计算机程序翻译，如有差异，请以英文原文为准。

查看原文本刊更多论文

An approach to extract RBAC models from BPEL4WS processes

The Business Process Execution Language for Web services (BPEL) has become the defacto standard for Web service composition. Yet, it does not address security aspects. This paper is concerned with access control for BPEL based processes. We present an approach to integrate role-based access control (RBAC) and BPEL on the meta-model level. Moreover, we show that such integration can be used to automate steps of the role engineering process. In particular, we extract RBAC models from BPEL processes and present an XSLT converter that transforms BPEL code to the XML import format of the xoRBAC software component.

求助全文

通过发布文献求助，成功后即可免费获取论文全文。去求助

来源期刊

13th IEEE International Workshops on Enabling Technologies: Infrastructure for Collaborative Enterprises

自引率

0.00%

发文量