Specification and verification of workflows with RBAC mechanism and SoD constraints

Weiqiang Kong, Kazuhiro Ogata, Kokichi Futatsugi

Research output: Contribution to journalArticle

8 Citations (Scopus)


Security considerations, such as role-based access control (RBAC) mechanism and separation of duty (SoD) constraints, are important and integral to workflow systems. Since the definition of workflows with these security considerations is a complicated and error-prone process, rigorous verification techniques are desirable for uncovering logical errors and assuring correctness. We propose the use of an equation-based method - the OTS/Cafe OBJ method to model, specify and verify workflows with such security considerations. Specifically, a workflow with the security considerations, is modeled as an OTS, a kind of transition system; the OTS is then specified in CafeOBJ, an algebraic specification language. We verify that the OTS has desired safety and liveness properties by using the CafeOBJ system as an interactive theorem prover. A case study on a sample workflow that deals with travel expense reimbursement is used to demonstrate our method.

Original languageEnglish
Pages (from-to)3-32
Number of pages30
JournalInternational Journal of Software Engineering and Knowledge Engineering
Issue number1
Publication statusPublished - Feb 1 2007

All Science Journal Classification (ASJC) codes

  • Software
  • Computer Networks and Communications
  • Computer Graphics and Computer-Aided Design
  • Artificial Intelligence

Fingerprint Dive into the research topics of 'Specification and verification of workflows with RBAC mechanism and SoD constraints'. Together they form a unique fingerprint.

  • Cite this