Abstract
Conventional workflow management systems have been criticized for being too rigid in dealing with changes in organizational policies, in particular for the lack of flexible mechanisms for handling complex role resolution. In this paper we describe a rule-based approach (EROICA) for managing organizational policies in workflow systems. Our approach extends the well-known ECA (event-condition-action) approach used in database systems by elevating roles, objects and time intervals to first class citizens, hence the term EROICA (event-role-object-interval-condition-action). In this paper, we focus on the development of a flexible role resolution mechanism that operates under various business constraints specified with EROICA rules. We further discuss the issues of architecture and implementation and demonstrate that the EROICA framework is promising in making next generation of workflow systems more powerful and flexible.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
C. Bussler, “Policy Resolution in Workflow management Systems,” DEC Technical Journal, Vol. 6, No. 4, Fall 1994.
C. Bussler and S. Jablonski, “Policy Resolution for Workflow management”, Proceedings 28 th Hawaii International Conf. on System Sciences, January 1995.
S. Castano and M. Fugini, “Rules and Patterns for Security in Workflow Systems”, DB Security 59–74, 1998.
S. Ceri, P. Grefen and G. Sanchez, “WIDE-A Distributed Architecture for Workflow Management”, Proc. of the 7th International Workshop on Research Issues in Data Engineering, Birmingham, 1997.
E. C. Cheng, “An object-oriented organizational model to support dynamic role-based access control in electronic commerce”, Decision Support Systems. vol. 29, no. 4; Dec. 2000; p. 357–69.
D.K.W. Chiu, Q. Li and K. Karlapalem. “A meta modeling approach for workflow management system supporting exception handling”, Information Systems, 24(2), pp159–184, May 1999.
C. Hagen and G. Alonso, Exception handling in workflow management systems. IEEE Transactions on Software Engineering, Oct.2000; 26(10):943–58.
Y.-N. Huang and MC Shan, “Policies in a Resource Manager of Workflow Systems: Modeling, Enforcement and Management”, Proceedings of the 15th International Conf. on Data Engineering, 23–26 March 1999, Sydney, Austrialia.
S. Jajodia, P. Samarati, V. Subrahmanian, and E. Bertino, “A unified framework for enforcing multiple access control policies,” In SIGMOD’97, pages 474–485, Tucson, AZ, May 1997.
A. Kumar and Zhao, J.L., “Dynamic Routing and Operational Controls in Workflow Management Systems,” Management Science, 45(2), February 1999.
A. Kumar, “A framework for handling delegation in workflow management systems,” Workshop on Information Technology and Systems (WITS), Charlotte, December 1999.
A. Kumar, W.M.P. van der Aalst and H.M.W. Verbeek, “Dynamic Work Distribution in Workflow Management Systems: How to balance quality and performance?” Journal of MIS, Winter 2001–2002, Vol. 18, No. 3, 157–193.
D.R. McCarthy and U. Dayal, “The Architecture of an Active Database System”, in Proc. ACMSIGMOD, Portland, 1989, pp. 215–224.
R.S. Sandhu, E.J. Coyne, H.L. Feinstein, and C.E. Youman, “Role-Based Access Control Models”, IEEE Computer, 29(2): 38–47, 1996.
R.S. Sandhu, V. Bhamidipati, and Q. Manuawer, “The ARBAC97 Model for Role-Based Admnistration of Roles”, ACM Transactions on Information and System Security, 2(1): 105–135.
R. Simon and Mary Ellen Zurko, “Separation of Duty in Role-based Environments”, Proceedings of the 10th Computer Security Foundations Workshop (CSFW’97), 183–194.
M. zur Mühlen, “Resource Modeling in Workflow Applications”, Proceedings of the 1999 Workflow Management Conference. Muenster, Germany, November 9th 1999, Münster, 137–153.
M. zur Mühlen, “Evaluation of Workflow Management Systems Using Meta Models”, Proceedings of the 32 nd Hawaii International Conference on System Sciences, 1999.
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2002 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Kumar, A., Zhao, J.L. (2002). EROICA: A Rule-Based Approach to Organizational Policy Management in Workflow Systems. In: Meng, X., Su, J., Wang, Y. (eds) Advances in Web-Age Information Management. WAIM 2002. Lecture Notes in Computer Science, vol 2419. Springer, Berlin, Heidelberg. https://doi.org/10.1007/3-540-45703-8_19
Download citation
DOI: https://doi.org/10.1007/3-540-45703-8_19
Published:
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-44045-1
Online ISBN: 978-3-540-45703-9
eBook Packages: Springer Book Archive