Specification and verification of workflows with RBAC mechanism and SoD constraints

Weiqiang Kong, Kazuhiro Ogata, Kokichi Futatsugi

    Research output: Contribution to journalArticlepeer-review

    8 Citations (Scopus)


    Security considerations, such as role-based access control (RBAC) mechanism and separation of duty (SoD) constraints, are important and integral to workflow systems. Since the definition of workflows with these security considerations is a complicated and error-prone process, rigorous verification techniques are desirable for uncovering logical errors and assuring correctness. We propose the use of an equation-based method - the OTS/Cafe OBJ method to model, specify and verify workflows with such security considerations. Specifically, a workflow with the security considerations, is modeled as an OTS, a kind of transition system; the OTS is then specified in CafeOBJ, an algebraic specification language. We verify that the OTS has desired safety and liveness properties by using the CafeOBJ system as an interactive theorem prover. A case study on a sample workflow that deals with travel expense reimbursement is used to demonstrate our method.

    Original languageEnglish
    Pages (from-to)3-32
    Number of pages30
    JournalInternational Journal of Software Engineering and Knowledge Engineering
    Issue number1
    Publication statusPublished - Feb 2007

    All Science Journal Classification (ASJC) codes

    • Software
    • Computer Networks and Communications
    • Computer Graphics and Computer-Aided Design
    • Artificial Intelligence


    Dive into the research topics of 'Specification and verification of workflows with RBAC mechanism and SoD constraints'. Together they form a unique fingerprint.

    Cite this