Obtaining secure BPEL from Secure Business Process specified with BPMN

Abstract

Business Processes are an important resource for performance on business competitiveness. The Business Process descriptions made; with BPMN (Business Process Modelling Notation), the de facto standard in the market, can be translated into execution languages; such as BPEL (Business Process Execution Language). Originally, BPMN specification does not include the representation of security aspects. However, there are proposals that incorporate security specifications of Business Processes using BPMN. Among these we have considered for describing a SBP (Secure Business Process), incorporating the business analyst's perspective in relation to security. However, until now,there are no translations of the SBP to execution languages. In this paper we propose a translation of the security requirements, including access control, defined in a SBP to secure Web services using BPEL language.