Adaptive RBAC in Complex Event-Driven BPM Systems

Various real-time systems have been proposed for a wide range of business environments recently. One of the real-time system components is event. A single event is sometime meaningless. However, while complex events are incoming, automatic access control assignment is necessary to control real-time business process management systems (BPMS) and impart business process efficiency. Given the complexity of such events, access control rules are generated to ensure security, privacy, accuracy and conformity. This paper proposes a mechanism to handle complex-event-driven access control in BPMS for logistic. The separation-of-duty (SoD) constraint, as an extension of the typical role-based access control (RBAC), is used to invoke the system based on certain event types.