Constraint Expressions and Workflow Satisfiability
Abstract
A workflow specification defines a set of steps and the order in which those steps must be executed. Security requirements and business rules may impose constraints on which users are permitted to perform those steps. A workflow specification is said to be satisfiable if there exists an assignment of authorized users to workflow steps that satisfies all the constraints. An algorithm for determining whether such an assignment exists is important, both as a static analysis tool for workflow specifications, and for the construction of run-time reference monitors for workflow management systems. We develop new methods for determining workflow satisfiability based on the concept of constraint expressions, which were introduced recently by Khan and Fong. These methods are surprising versatile, enabling us to develop algorithms for, and determine the complexity of, a number of different problems related to workflow satisfiability.
Cite
@article{arxiv.1301.3402,
title = {Constraint Expressions and Workflow Satisfiability},
author = {Jason Crampton and Gregory Gutin},
journal= {arXiv preprint arXiv:1301.3402},
year = {2013}
}
Comments
arXiv admin note: text overlap with arXiv:1205.0852; to appear in Proceedings of SACMAT 2013