201. Using colored Petri nets to model and analyze workflow with separation of duty constraints
- Author
-
Jiaguang Sun, Yahui Lu, and Li Zhang
- Subjects
Engineering ,Correctness ,Separation of duties ,business.industry ,Mechanical Engineering ,Distributed computing ,Real-time computing ,Petri net ,Industrial and Manufacturing Engineering ,Computer Science Applications ,Tree (data structure) ,Control flow ,Workflow ,Control and Systems Engineering ,Reachability ,business ,Software ,Workflow management system - Abstract
Workflow provides a promising solution for organizations to achieve their business goals by interactions and collaborations between users. Separation of duty (SoD) is a security principle to prevent fraud and errors in collaborative workflow environments. It is crucial to verify and ensure the correctness and consistence of workflow with SoD constraints during the design time. In this paper, we propose a method to model and analyze workflow with SoD constraints based on colored Petri nets (CPN). The control flow, authorization rules and SoD constraints in a workflow are all represented by CPN and combined into one integrated CPN model. Then the execution paths of this model can be derived by reachability tree analysis. By analyzing these execution paths, some latent deadlocks caused by the inconsistency between authorization rules and SoD constraints can be detected.
- Published
- 2007