Skip to main content
SpringerLink
Log in
Book cover

International Conference on Business Process Management

BPM 2013: Business Process Management Workshops pp 520–525Cite as

Short Paper: Role-Based Access Control for Securing Dynamically Created Documents

  • Conference paper
  • First Online:

Part of the book series: Lecture Notes in Business Information Processing ((LNBIP,volume 171))

Abstract

Nowadays most of documents are held in digital form and stored in document repositories or databases. The documents can contain delicate information such that not all the actors on the partner side should see and edit. This leads to the necessity to restrict the actions that users could perform with the document content. In this work we research a possibility to integrate existing technologies in order to dynamically define forms and their security permissions. As the solution to the problem we introduce a dynamic way to define security permissions on the XML documents. We propose to use a role-based access control application on the document structure components and introduce a merging strategy to maintain the document’s integrity.

This is a preview of subscription content, log in via an institution.

Chapter
USD   29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD   39.99
Price excludes VAT (USA)
  • Available as EPUB and PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD   54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Learn about institutional subscriptions

References

  1. Basin, D., Doser, J., Lodderstedt, T.: Model driven security: from UML models to access control infrastructure. ACM Trans. Softw. Eng. Methodol. (TOSEM) 15(1), 39–91 (2006)

    Article  Google Scholar 

  2. Brucker, D.A., Petritsch, H.: Extending access control models with break-glass. In: Proceedings of the 14th ACM Symposium on Access Control Models and Technologies, pp. 197–206. ACM (2009)

    Google Scholar 

  3. Bertino, E., Braun, M, Castano, S., Ferrari E., Mesiti, M.: Author-X: a Java-based system for XML data protection. In: IFIP Workshop on Database Security, pp. 15–26, (2000)

    Google Scholar 

  4. Damiani, E., Vimercati, S.C., Paraboschi, S., Samarati, P.: A fine-grained access control system for XML documents. ACM Trans. Inf. Syst. Secur. (TISSEC) 5(2), 169–202 (2002)

    Article  Google Scholar 

  5. Damiani, E., De Capitani di Vimercati, S., Paraboschi, S., Samarati, P.: Securing XML documents. In: Zaniolo, C., Grust, T., Scholl, M.H., Lockemann, P.C. (eds.) EDBT 2000. LNCS, vol. 1777, pp. 121–135. Springer, Heidelberg (2000)

    Google Scholar 

  6. Lakk H.: Model-driven role-based access control for databases. Master thesis, University of Tartu (2012)

    Google Scholar 

  7. Murata, M., Tozawa, A., Kudo, M., Hada, S.: XML access control using static analysis. ACM Trans. Inf. Syst. Secur. 9(3), 292–324 (2006). ACM

    Article  Google Scholar 

  8. Raudjärv, R.: Dynamic schema-based web forms generation in Java. Master thesis, University of Tartu (2010)

    Google Scholar 

  9. Seitz, L., Rissanen, E., Sandholm, T., Firozabadi B. S., Mulmo O.: Policy administration control and delegation using XACML and delegent. In: Proceedings of the 6th IEEE/ACM International Workshop on Grid Computing, pp. 49–54. IEEE (2005)

    Google Scholar 

  10. Zhang, X., Park, J., Sandhu, R.: Schema based XML security: RBAC approach. In: De Capitani di Vimercati, S., Ray, I., Ray, I. (eds.) Data and Applications Security XVII. IFIP, vol. 142, pp. 330–343. Springer, New York (2004)

    Chapter  Google Scholar 

Download references

Author information

Authors and Affiliations

  1. Nortal AS, Lõõtsa 6C, 11415, Tallinn, Estonia

    Kaarel Tark

  2. Institute of Computer Science, University of Tartu, J. Liivi 2, 50409, Tartu, Estonia

    Raimundas Matulevičius

Authors
  1. Kaarel Tark
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Raimundas Matulevičius
    View author publications

    You can also search for this author in PubMed Google Scholar

Corresponding author

Correspondence to Raimundas Matulevičius .

Editor information

Editors and Affiliations

  1. University of Rostock, Rostock, Germany

    Niels Lohmann

  2. Ulsan National Institute of Science and Technology, Ulsan, Korea, Republic of (South Korea)

    Minseok Song

  3. Stockholm University, Stockholm, Sweden

    Petia Wohed

Rights and permissions

Reprints and permissions

Copyright information

© 2014 Springer International Publishing Switzerland

About this paper

Cite this paper

Tark, K., Matulevičius, R. (2014). Short Paper: Role-Based Access Control for Securing Dynamically Created Documents. In: Lohmann, N., Song, M., Wohed, P. (eds) Business Process Management Workshops. BPM 2013. Lecture Notes in Business Information Processing, vol 171. Springer, Cham. https://doi.org/10.1007/978-3-319-06257-0_41

Download citation

  • DOI: https://doi.org/10.1007/978-3-319-06257-0_41

  • Published:

  • Publisher Name: Springer, Cham

  • Print ISBN: 978-3-319-06256-3

  • Online ISBN: 978-3-319-06257-0

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation