A New Formal Proxy-Based Approach for Secure Distributed Business Process on the Cloud
Nouioua Maroua, Adel Alti, Belhassen Zouari · 2018
Today, the main focus of multi-site companies is to find a powerful Business Process Management (BPM) and advanced secure communications with the lowest cost possible. The cloud computing as a perfect paradigm for BPM, it offers many characteristics like the elastic-BPM and the pay-per-use business model. To exchange documents and execute various interactions between companies a lot of benefits are offered through the using of cloud. Nevertheless it unfortunately presents many drawbacks that affect the security of BPM, including the mediocre degree of protection. Therefore sensitive Documents may be target of malicious attacks due to the lack of the privacy and confidentiality checking. Unauthorized access to such sensitive documents can cause many problems such as privacy violation. In this paper, we propose the AIRD (Analysis and Interaction, Role, Document) formal proxy-based BPM approach for detecting unauthorized access to sensitive documents and fraudulent transactions on documents. We intend to illustrate our proposal using e-healthcare system.