Formal Approach for Authorization in Distributed Business Process Related Task Document Role Based Access Control

The business process management is powerful discipline used by the companies in order to improve their performance and increase their productivity and efficiency. The multi-companies aim to enhance their collaborative BPM to make it more flexible, coherent and consistence. Therefore, they interest by the opportunities offered by the Cloud. Nevertheless the benefits of Cloud are shadowed with the lack of security. Thus, the consolidation of business processes and role based access control is recommended. This paper presents a novel extension of Role Based Access Control Model for business process BP, called Task Document Role Based Access Control Model (TDRBAC). The main objective of our model is to protect the access authorization to tasks on-premise and to documents on cloud. The access to documents is not public, thus we use a secure proxy called AIRD-proxy in order to enhance and robust the access and to protect the data aggregated in documents. The proxy is modeled with the main of CPN-tools. Moreover we suggest an algorithm based on internal and external authorization to manage the global authorization of the model based on the attributes and the constraints proposed.