Business Process Security Enforcement via Platform Translation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current business process modeling tools lack effective mechanisms for enforcing security requirements across different platforms, leading to inconsistent and platform-specific security implementations.
Innovation Solution
A system and technique that uses a tool editor to develop and annotate business process models with security requirements, recommending candidate refinements and services based on previous models, generating platform-independent files, and transforming them into platform-specific files for execution, utilizing an orchestration engine and security modules to enforce security features.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If business process modeling tools are used to define business processes, then business process definition capability is improved, but security requirement enforcement consistency deteriorates
Solution Approach 1:
The patent introduces an intermediary component that translates business process models annotated with security requirements into platform-specific security configurations. This intermediary layer ensures consistent security enforcement across different platforms by mediating between the universal business process model and platform-specific implementations, preventing direct platform-specific security implementations that cause inconsistency.
Solution Approach 2:
The patent segments the security enforcement mechanism into distinct components: (1) business process model annotation layer for defining security requirements, (2) translation layer for converting annotations to platform-specific configurations, and (3) execution layer for enforcing security. This segmentation allows the business process definition to remain platform-independent while enabling consistent security enforcement across platforms.
2Adaptability or versatility
If platform-specific security implementations are used, then platform-specific security enforcement is improved, but security consistency across platforms deteriorates
Solution Approach 1:
The patent implements a universal annotation mechanism that can be applied across different platforms and business process models. The annotation syntax and security requirement definitions are platform-independent, allowing the same security requirements to be consistently enforced across multiple platforms through translation to platform-specific configurations.
Solution Approach 2:
The translation component acts as an intermediary that receives universal platform-independent security annotations and automatically generates appropriate platform-specific security configurations. This mediator ensures that security consistency is maintained across platforms by systematically translating universal requirements into platform-appropriate implementations without manual intervention.
3Adaptability or versatility
If manual security configuration is performed for each platform, then platform-specific security customization is improved, but manual effort and time consumption deteriorates
Solution Approach 1:
The patent enables preliminary annotation of security requirements in the business process model itself, before deployment to any platform. These annotations are automatically translated into platform-specific security configurations during the deployment process, eliminating the need for manual security configuration on each platform and significantly reducing time consumption while maintaining platform-specific customization.
Solution Approach 2:
The system performs self-service by automatically generating platform-specific security configurations from the annotated business process model without requiring manual intervention for each platform. The translation mechanism autonomously adapts the universal security annotations to platform-specific requirements, reducing manual effort while maintaining customization capability.
Data Source
AI summary
A functional model of a business process which is annotated with security requirements is provided. Platform-specific executable code and at least one configuration file for a given security enforcement component to enforce the security requirements of the model are then generated automatically.