Workflow Proxy Segregating Private Data for Secure Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional workflow management systems fail to ensure that only authorized users have access to private information and execute activities securely, compromising the integrity and security of the workflow process.
Innovation Solution
A workflow management system comprising a workflow engine, a proxy, a tasklist manager, and a security policy module that separates private and public information, with the proxy removing private details from notifications and providing them only to authorized users after verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If private information is included in notifications to all users, then users can access necessary information to execute activities, but unauthorized users may access confidential information
Solution Approach 1:
The notification is segmented into two distinct parts: public information and private information. Public information is distributed to all affected users, while private information is selectively provided only to authorized users after verification. This segmentation resolves the contradiction by ensuring broad accessibility of necessary information while protecting confidential data from unauthorized access.
Solution Approach 2:
The proxy acts as an intermediary between the workflow engine and users. It receives notifications containing both public and private information, separates them, distributes public information to all users, and selectively provides private information only to verified authorized users. This intermediary mechanism ensures secure information distribution while maintaining workflow efficiency.
2Ease of operation
If all users receive complete notification information, then users have full context to execute activities, but unauthorized users can access confidential data
Solution Approach 1:
Different users receive different quality/amount of information based on their authorization level. Authorized users receive both public and private information, while non-authorized users receive only public information. This local quality approach ensures each user gets exactly the information they need for their role without exposing them to unauthorized data.
Solution Approach 2:
The proxy serves as an intermediary that filters and distributes information based on user authorization. It verifies user credentials and selectively provides private information only to authorized users, preventing unauthorized access while ensuring authorized users have full context for executing activities.
3Reliability
If private information is provided to all users, then users can make informed decisions, but the system becomes vulnerable to security breaches
Solution Approach 1:
The information distribution mechanism is segmented into two clear pathways: one for public information distributed to all users, and another for private information distributed only to verified authorized users. This segmentation maintains system integrity while managing complexity through clear, distinct information flows rather than complex conditional logic.
Solution Approach 2:
The proxy acts as an intermediary that simplifies the information distribution mechanism by centralizing the verification and selective distribution of private information. This single point of control maintains workflow integrity while avoiding the need for complex distributed security checks across multiple system components.
4Productivity
If the tasklist manager has unlimited access to activity information, then it can effectively manage task distribution, but confidential information is exposed to unauthorized access
Solution Approach 1:
The proxy is introduced as an intermediary between the tasklist manager and the workflow engine. The tasklist manager can efficiently manage task distribution by working with the proxy, which handles the security-sensitive operations of verifying user authorization and selectively providing private information. This maintains productivity while ensuring reliable access control.
Solution Approach 2:
The tasklist manager's access to information is segmented: it has full access to public information for efficient task management, but access to private information is controlled through the proxy which verifies authorization. This segmentation allows the tasklist manager to maintain high productivity while the system preserves security through controlled access to sensitive data.
Data Source
AI summary
A method and system to execute an activity in a workflow process. The method includes receiving a notification to execute the activity. The notification contains private information and public information relating to the activity. The method further includes removing the private information from the notification, providing the notification that contains the public information to users being affected by the activity, receiving a request to execute the activity from one or more of the users, and providing the private information to the users after verifying the request.