Security aspects of soa
AssigneeSap SE
InventorsAzzedine Benameur, Paul El Khoury, Joana Da Trindade
Life of this patent
Estimating the term…
Abstract
The present description refers in particular to a computer implemented method, computer program product, and computer system for dynamic separation of duties (SoD) during workflow execution. Based on at least one policy file, at a monitoring module, at least one node to be logged from a message in a message pipe of one or more messages exchanged when executing a workflow instance may be specified. Information on the at least one logged node may be passed to an enforcer. SoD violation for the at least one logged node may be checked at the enforcer. If, for the at least one logged node, SoD is violated, action may be taken based on the at least one policy file.
Claims20
A computer-implemented method for dynamic separation of duties (SoD) during workflow execution, the method comprising:
- specifying at a monitoring module, based on at least one policy file, at least one node to be logged from a message in a message pipe of one or more messages exchanged when executing a workflow instance;
- passing information on the at least one logged node to an enforcer;
- checking SoD violation for the at least one logged node at the enforcer;
- and
- if for the at least one logged node SoD is violated, acting based on the at least one policy file.
A computer system for dynamic separation of duties (SoD) during workflow execution, the system including instructions recorded on a computer-readable medium, the system comprising:
- a monitoring module configured to:
- specify based on at least one policy file at least one node to be logged from a message in a message pipe of one or more messages exchanged when executing a workflow instance;
- and
- pass information on the at least one logged node to an enforcer;
- wherein the enforcer is configured to:
- check SoD violation for the at least one logged node;
- and
- act based on the at least one policy file, if for the at least one logged node SoD is violated.
Computer program product comprising computer readable instructions, which when loaded and run in a computer and/or computer network system, causes the computer system and/or the computer network system to:
- specify at a monitoring module, based on at least one policy file, at least one node to be logged from a message in a message pipe of one or more messages exchanged when executing a workflow instance;
- pass information on the at least one logged node to an enforcer;
- check SoD violation for the at least one logged node at the enforcer;
- and
- if for the at least one logged node SoD is violated, act based on the at least one policy file.
Dependencies are inferred from the claim text.