BusinessActivities Framework -- Homepage

Institute for Complex Networks

BusinessActivity Library and Runtime Engine:

The BusinessActivity library and runtime engine implements different parts of the BusinessActivities Framework, it can be downloaded from this Web page (see below). As a research project, this library is subject to an ongoing extension/improvement process -- some of the resulting versions are released on this web page at irregular intervals.

Main Features (in Version 0.2.1):

Specification and enforcement of process-related RBAC models including:

Many-to-many task-role and role-subject assignment (and revocation).
Arbitrary (DAG) role-hierarchies (permission-inheritance).
Static mutual exclusion (SME) constraints on tasks.
Dynamic mutual exclusion (DME) constraints on tasks.
Role-binding (RBind) constraints on tasks.
Subject-binding (SBind) constraints on tasks.
Role-based and subject-based break-glass policies.

Automated consistency checking for SME, DME, RBind, and SBind constraints.
Automated consistency checking for break-glass policies.
Automated consistency checking for task-to-role and role-to-subject assignments.
Extensive review functions (introspection), e.g. subject-role review, task-role review, subject-task review.
Specification and instantiation of business processes.
Permission-aware and constraint-aware task allocation (i.e. runtime allocation of task instances).

Download:

Extensions:

We specified and implemented several extensions for the BusinessActivity library and runtime engine. These extensions (i.e. source code packages) as well as corresponding publications are available here

Related Papers and Articles:

Copyright policy:The papers obtained from this Web site are included by the contributing authors as a means to ensure timely dissemination of scholarly and technical work on a non-commercial basis. Copyright and all rights therein are maintained by the authors or by other copyright holders, notwithstanding that they have offered their works here electronically. It is understood that all persons copying this information will adhere to the terms and constraints invoked by each author's copyright. These works may not be reposted without the explicit permission of the copyright holder.

S. Schefer-Wenzl, M. Strembeck: Model-driven Specification and Enforcement of RBAC Break-Glass Policies for Process-Aware Information Systems, In: Information and Software Technology (IST), Vol. 56, No. 10, October 2014 (doi)

S. Schefer-Wenzl, M. Strembeck: Generic Support for RBAC Break-Glass Policies in Process-Aware Information Systems, In: Proc. of the 28th ACM Symposium on Applied Computing (SAC), Coimbra, Portugal, March 2013 (ps, pdf)

S. Schefer-Wenzl, M. Strembeck: A UML Extension for Modeling Break-Glass Policies, In: Proc. of the 5th International Workshop on Enterprise Modelling and Information Systems Architectures (EMISA), Lecture Notes in Informatics (LNI), Vol. 206, Vienna, Austria, September 2012 (ps, pdf)

S. Schefer, M. Strembeck, J. Mendling, A. Baumgrass: Detecting and Resolving Conflicts of Mutual-Exclusion and Binding Constraints in a Business Process Context, In: Proc. of the 19th International Conference on Cooperative Information Systems (CoopIS), Lecture Notes in Computer Science (LNCS), Vol. 7044, Springer Verlag, Crete, Greece, October 2011 (ps, pdf, extended version)

M. Strembeck, J. Mendling: Modeling Process-related RBAC Models with Extended UML Activity Models, In: Information and Software Technology (IST), Vol. 53, No. 5, May 2011 (doi, pdf)

M. Strembeck, J. Mendling: Generic Algorithms for Consistency Checking of Mutual-Exclusion and Binding Constraints in a Business Process Context, In: Proc. of the 18th International Conference on Cooperative Information Systems (CoopIS), Lecture Notes in Computer Science (LNCS), Vol. 6426, Springer Verlag, Crete, Greece, October 2010 (ps, pdf, extended version)

Contact:
Mark Strembeck

Mark Strembeck