An access controlled workflow (ACWF) specifies a set of tasks that have to be executed by authorized users with respect to some partial order in a way that all authorization constraints are satisfied. Recent research focused on weak, strong and dynamic controllability of ACWFs under conditional uncertainty showing that directional consistency is a way to generate any consistent assignment of tasks to users efficiently and without backtracking. This means that during execution we never realize that we would have chosen a different user for some previous task to avoid some constraint violation. However, dynamic controllability of ACWFs also depends on how the components of the ACWF are totally ordered. In this paper, we employ Constraint Networks Under Conditional Uncertainty (CNCUs) to solve this limitation, and provide an encoding from ACWFs into CNCUs to exploit existing controllability checking algorithms for CNCUs. We also address the execution of a controllable ACWF discussing which (possibly different) users are committed for the same tasks depending on what is going on (online planning).

Resource Controllability of Workflows Under Conditional Uncertainty

Zavatteri, Matteo
;
Combi, Carlo
;
Viganò, Luca
2019-01-01

Abstract

An access controlled workflow (ACWF) specifies a set of tasks that have to be executed by authorized users with respect to some partial order in a way that all authorization constraints are satisfied. Recent research focused on weak, strong and dynamic controllability of ACWFs under conditional uncertainty showing that directional consistency is a way to generate any consistent assignment of tasks to users efficiently and without backtracking. This means that during execution we never realize that we would have chosen a different user for some previous task to avoid some constraint violation. However, dynamic controllability of ACWFs also depends on how the components of the ACWF are totally ordered. In this paper, we employ Constraint Networks Under Conditional Uncertainty (CNCUs) to solve this limitation, and provide an encoding from ACWFs into CNCUs to exploit existing controllability checking algorithms for CNCUs. We also address the execution of a controllable ACWF discussing which (possibly different) users are committed for the same tasks depending on what is going on (online planning).
2019
978-3-030-37452-5
Access controlled workflow, Resource allocation under uncertainty, Online planning, Resource controllability, CNCU, Zeta, AI-based security, Business process compliance under uncertainty
File in questo prodotto:
Non ci sono file associati a questo prodotto.

I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione.

Utilizza questo identificativo per citare o creare un link a questo documento: https://hdl.handle.net/11562/1009009
Citazioni
  • ???jsp.display-item.citation.pmc??? ND
  • Scopus 12
  • ???jsp.display-item.citation.isi??? ND
social impact