BPEL4RBAC: An authorisation specification for WS-BPEL

Xin Wang*, Yanchun Zhang, Hao Shi, Jian Yang

*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceedingChapterpeer-review

12 Citations (Scopus)


Business process management is designed to make business activities and trade easier and more cost effective. The increasing business integration and legal requirements raise the need for secure business processes. However, the openness and distribution nature of inter-organisational business processes may result in more security breaches. As a widely accepted standard, WS-BPEL does not support for business process security protection even if the participating organisations already have working security policies. To address this problem, we have developed an authorisation specification BPEL4RBAC for WS-BPEL. Through BPEL4RBAC access control model, with an extension for WS-BPEL, called BPEL4RBAC policy language, the secure WS-BPEL is then achievable. The former introduces the access control capability into business process environment while the latter is used to represent the authorisation information in WS-BPEL.

Original languageEnglish
Title of host publicationWeb Information Systems Engineering - WISE 2008
Subtitle of host publication9th International Conference, Auckland, New Zealand, September 1-3, 2008. Proceedings
EditorsJames Bailey, David Maier, Klaus-Dieter Schewe, Bernhard Thalheim, Xiaoyang Sean Wang
Place of PublicationBerlin
PublisherSpringer, Springer Nature
Number of pages15
ISBN (Electronic)9783540854814
ISBN (Print)9783540854807
Publication statusPublished - 2008
Event9th International Conference on Web Information Systems Engineering, WISE 2008 - Auckland, New Zealand
Duration: 1 Sept 20083 Sept 2008

Publication series

NameLecture Notes in Computer Science
PublisherSpringer Berlin Heidelberg
ISSN (Print)0302-9743
ISSN (Electronic)1611-3349


Other9th International Conference on Web Information Systems Engineering, WISE 2008
Country/TerritoryNew Zealand


Dive into the research topics of 'BPEL4RBAC: An authorisation specification for WS-BPEL'. Together they form a unique fingerprint.

Cite this