Implementing secure document circulation: a prototype

ABSTRACT

Interoperable e-business applications are essential for increasing efficiency in the digital economy. We present an infrastructure based on our secure document circulation architecture model, designed for securing information flow for interorganisational workflows. We view this initial prototype as simply a proof-of-concept, and plug in various software tools to implement the prototype components. A simple example, based on a loan application workflow, is discussed to indicate the potential of this work.

REFERENCES

• 1: S. Bracher and P. Krishnan. Secure Document Circulation: An Architecture for e-Health. In Proceedings of the National e-Health Privacy and Security Symposium, pages 67--77, Brisbane, Australia, October 2006. QUT.
• 2: Mikkel Hippe Brun , Christian Lanng, Reducing barriers for e-business in SME's through an open service oriented infrastructure, Proceedings of the 8th international conference on Electronic commerce: The new e-commerce: innovations for conquering current barriers, obstacles and limitations to conducting successful business on the internet, August 13-16, 2006, Fredericton, New Brunswick, Canada [doi>10.1145/1151454.1151519]
• 3: S. Campadello, L. Compagna, D. Gidoin, S. Holtmanns, V. Meduri, J.-C. Pazzaglia, M. Seguran, and R. Thomas. A7.D1.1 - Scenario selection and definition. Technical report, SERENITY (System Engineering for Security and Dependability), 2006. http://serenity-forum.org/Work-package-7-1.html?artsuite=0#sommaire_1.
• 4: George Feuerlicht , Sooksathit Meesathit, Design framework for interoperable service interfaces, Proceedings of the 2nd international conference on Service oriented computing, November 15-19, 2004, New York, NY, USA [doi>10.1145/1035167.1035210]
• 5: Y. S. Kuo , Lendle Tseng , Hsun-Cheng Hu , N. C. Shih, An XML interaction service for workflow applications, Proceedings of the 2006 ACM symposium on Document engineering, October 10-13, 2006, Amsterdam, The Netherlands [doi>10.1145/1166160.1166177]
• 6: Davide Rossi, Orchestrating document-based workflows with X-Folders, Proceedings of the 2004 ACM symposium on Applied computing, March 14-17, 2004, Nicosia, Cyprus [doi>10.1145/967900.968004]
• 7: Ravi S. Sandhu , Edward J. Coyne , Hal L. Feinstein , Charles E. Youman, Role-Based Access Control Models, Computer, v.29 n.2, p.38-47, February 1996 [doi>10.1109/2.485845]
• 8: Security Assertion Markup Language (SAML) (version 1.1). http://www.oasis-open.org/committees/tc_home. php?wg_abbrev=security#samlv11. OASIS, 2004.
• 9: Iván P. Vélez , Bienvenido Vélez, Lynx: an open architecture for catalyzing the deployment of interactive digital government workflow-based systems, Proceedings of the 2006 international conference on Digital government research, May 21-24, 2006, San Diego, California [doi>10.1145/1146598.1146683]
• 10: Web Services Business Process Execution Language (version 2.0). http://www.oasis-open.org/specs/index.php# wsbpelv2.0. OASIS, 2007.
• 11: Boyi Xu , Lihong Jiang , Fanyuan Ma, On the new B to B e-business enabling platform: cnXML in China, Proceedings of the 7th international conference on Electronic commerce, August 15-17, 2005, Xi'an, China [doi>10.1145/1089551.1089672]

INDEX TERMS

Primary Classification:
  D. Software
  D.2 SOFTWARE ENGINEERING
      D.2.0 General
          Subjects: Protection mechanisms

Additional Classification:
  H. Information Systems
  H.4 INFORMATION SYSTEMS APPLICATIONS
  H.5 INFORMATION INTERFACES AND PRESENTATION (I.7)
      H.5.2 User Interfaces (D.2.2, H.1.2, I.3.6)
          Subjects: Prototyping

General Terms:
Design, Security

Keywords:
access control, e-business, workflow