Distributed Workflow Identity Service for Secure Interoperability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional Workflow Management Systems (WFMS) lack true interoperability, making it difficult for disparate systems to communicate and integrate, and their centralized security approaches limit accessibility for geographically dispersed and mobile workforces.
Innovation Solution
The implementation of distributed workflow processing techniques using an identity service for dynamic trust establishment, allowing actions and workflows to be authenticated and processed across external environments, ensuring secure and verifiable communication through trust specifications and digital signatures.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized workflow management system is used to maintain tight access controls and security, then security and access control are improved, but interoperability and accessibility are dramatically decreased
Solution Approach 1:
The patent segments the centralized workflow management system into distributed components including workflow engines, identity services, and security services that can operate independently across different systems. Each system maintains its own security model while participating in the distributed workflow through standardized interfaces, enabling both security and interoperability.
Solution Approach 2:
The patent introduces identity services as intermediaries that mediate authentication and authorization between disparate workflow systems. These identity services verify participant identities and manage access rights without requiring direct integration between workflow systems, thus maintaining security while enabling interoperability.
2Reliability
If a centralized workflow system is used to maintain security, then access control is improved, but accessibility for geographically dispersed and mobile workforces is decreased
Solution Approach 1:
The patent divides the centralized system into distributed workflow engines that can be deployed locally or accessed remotely. This segmentation allows mobile workers to access workflow systems from any location while security policies are enforced by distributed identity services rather than a single centralized point.
Solution Approach 2:
The patent implements dynamic security enforcement where access control decisions are made in real-time by identity services based on current context, participant identities, and workflow requirements. This dynamic approach maintains strict access control while enabling flexible access for mobile and distributed workforces.
3Adaptability or versatility
If conventional email systems are used to achieve partial interoperability, then accessibility is improved, but sophisticated control-flow handling is lost
Solution Approach 1:
The patent creates a universal workflow framework that can handle sophisticated control-flow constructs (splits, joins, merges, waits, branches) while maintaining interoperability across different systems. This framework uses standardized messages and protocols that work across disparate systems without sacrificing control-flow capabilities.
Data Source
AI summary
Techniques for distributed workflow processing are presented. A first workflow system and a second workflow system process actions of a workflow. The workflow is coordinated through one or more identity services. The identity services also establish trusted and secure communications between the first and second workflow systems.