RBAC for Supply Chain Process Monitoring

Abstract

In supply chain environments, it is common that execution of a process involves interactions among multiple organizations. This requires delicate control of accessing sensitive data and information which are generated, managed, and shared among the participants by information systems such as business process management (BPM), supply chain management (SCM) and customer relationship management (CRM). In order to resolve this problem, traditional role-based access control (RBAC) model was introduced and it can provide a general method to control access to objects. However, the traditional RBAC model lacks in capability of addressing configurability, customizability, and scalability of user privileges in dynamic multi-organizational environments such as B2B, logistics and SCM. In this paper, we propose a privilege-template based RBAC model that can resolve problems related to effective access control for supply chain processes, which are assumed to be managed by the BPM system.