MODELING OF TASK-BASED CONSTRAINTS AND AUTOMATED POLICY DERIVATION
A method and system for the augmentation of at least one task of a business process model are described, such augmentation including receiving a task-based authorization constraint to be applied to the at least one task. An augmented business process model is generated utilizing the business process model and the task-based authorization constraint. An authorization policy is automatically derived from the augmented business process model.
1 . A method comprising:
receiving, via an interface, an augmentation of at least one task of a business process model, the augmentation comprising a task-based authorization constraint;
generating an augmented business process model using the business process model and the task-based authorization constraint; and
automatically deriving an authorization policy from the augmented business process model.
2 . The method of claim 1 , including receiving the task-based authorization constraint via the interface as a visual business process modeling notation for association with at least one task of the business process model.
3 . The method of claim 1 , including receiving via the interface, a grouping of a plurality of tasks of the business process model, and receiving the augmentation for association with the group.
4 . The method of claim 2 , wherein the visual business process modeling notation is at least one of a textual notation or a graphical notation.
5 . The method of claim 1 , wherein the authorization policy automatically derived from the augmented business process model is a role-based control policy.
6 . The method of claim 1 , wherein at least one task of the business process model is at least one of a manual task, a partially automated task, or a fully automated task.
7 . The method of claim 1 , wherein the automatic derivation of the authorization policy includes extracting the task-based authorization constraint from the augmented business process model.
8 . The method of claim 1 , wherein the automatic derivation of the authorization policy includes parsing the augmented business process model to identify and generate a role-based policy component for the authorization policy.
9 . The method of claim 1 , wherein the automatic derivation of the authorization policy includes detecting the task-based authorization constraint within the augmented business process model, and generating a condition based on the task-based authorization constraint for the authorization policy.
10 . The method of claim 9 , including determining whether the at least one task is a manual task and, based on the determination, selectively applying an attribute function to the condition.
11 . The method of claim 1 , including enacting an executable process definition based on the enhanced business process model using a workflow management system.
12 . The method of claim 1 , including enacting the authorization policy using a security system.
13 . A system comprising:
a process modeling component to:
receive an augmentation of at least one task of a business process model, the augmentation comprising a task-based authorization constraint, and
generate an augmented business process model using the business process model and the task-based authorization constraint; and
a transformation component automatically to derive an authorization policy from the augmented business process model.
14 . The system of claim 13 , wherein the process modeling component is to receive the task-based authorization constraint via the interface as a visual business process modeling notation for association with at least one task of the business process model.
15 . The system of claim 13 , wherein the process modeling component is to receive grouping of a plurality of tasks of the business process model, and is to receive the augmentation for association with the group.
16 . The system of claim 13 , wherein the transformation component is to parse the augmented business process model to identify and generate a role-based policy component for the authorization policy.
17 . The system of claim 13 , including a workflow management system to impact an executable process definition based on the enhanced business process model.
18 . The system of claim 13 , including a security system to impact the authorization policy.
19 . A machine-readable medium embodying instructions that, when executed by processor, cause the processor to:
receive an augmentation of at least one task of a business process model, the augmentation comprising a task-based authorization constraint;
generate an augmented business process model using the business process model and the task-based authorization constraint; and
automatically derive an authorization policy from the augmented business process model.
20 . The machine-readable medium of claim 19 , wherein the instructions cause the processor to receive the task-based authorization constraint via as a visual business process modeling notation for association with at least one task of the business process model.
21 . The machine-readable medium of claim 19 , where the instructions cause the processor to receive grouping of a plurality of tasks of the business process model, and to receive the augmentation for association with the group.
22 . A system comprising:
first means for:
receiving an augmentation of at least one task of a business process model, the augmentation comprising a task-based authorization constraint, and
generating an augmented business process model using the business process model and the task-based authorization constraint; and
second means for automatically deriving an authorization policy from the augmented business process model.