Role-based Model Research Articles

유비쿼터스 환경에서 자발적 상호연동을 지원하는 역할 기반 응용 모델

The spontaneous interoperation is an important characteristic of ubiquitous applications and is closely related with mobility. The mobile components in ubiquitous environments are liable to appear in and disappear from one physical space to another. Because this characteristic certainly influences the structure and behavior of applications, they should adapt themselves to the changed environments by configuring their structure and behaviors. Consequently, developers are faced with the above challenging issue when they design and implement ubiquitous applications. The role concept is an efficient tool to model participant entities, their relationship, and collaboration, so role-based model are appropriate to describe a structure and behavior of software system. But, little attention has been given to reflect characteristics of ubiquitous applications. To tackle the problem, this study considers a ubiquitous application as a software organization which consists of software components and proposes an enhanced role-based application model for supporting spontaneous interoperation.

The base model of role-based access control and the “cost-risk” criterion of data processing

This paper analyzes the base model of role-based access control, specifically, the risks in developing an information-secure computational system. In developing the plan of the “cost-risk” analysis, the area of application should be identified on the basis of documents and on detailed knowledge of the given model of information security and software means. The requirements for role-based security models are defined.

A Role-Based Authorization Model for Service-Oriented Architecture

Service-oriented architecture (SOA) is widely recognized as an especially effective solution for integrating loosely coupled and distributed resources. One of the major challenges in developing SOAbased applications is the management of authorization requirements in distributed environments. This paper proposes a formal authorization model based on a role-based access control model to demonstrate the approach for authorizing service requesters, to access a particular service and information under specific permissions in an SOA. The proposed model defines the authorization relationships and constraints among users (service requesters), roles, permissions, and services according to first-order logic and set theory. Furthermore, role hierarchy and service hierarchy are discussed to fulfill the requirements for authorization hierarchy. Finally, we use a health care system developed in a service-based architecture to demonstrate the utility of the concepts of the proposed authorization model.

Role-facing modelling and analysis of workflow based on supply and demand network with multi-function and opening characteristics

Nowadays, with the normality of multi flows interactions and network development of the enterprises, people's knowledge and research on enterprise management have changed significantly, that is, the emergence of research-oriented network which has brought the development of the workflow modelling into a brand new stage definitely. The traditional workflow model develops mostly based on process neglecting the interaction among roles, while it puts more emphasis on the interactive cooperation relationship among main bodies in the supply and demand network environment. In view of the above, this paper establishes the role concept and its attribution model in supply and demand network environment based on the analysis of the role related theory. By referring to the current description of 'workflow process model' - 'formalisation' and 'non-formalisation', this paper puts forward a role-based workflow model in the supply and demand network environment, summarises the modelling procedure and methods systematically by combing with examples and analyses and verifies the attribute of model with Markov Chain, etc. The results indicate that this modelling idea is benefit to perfect the model structure and improves the property of the workflow model.

A Role-Based Service Level NFC Ecosystem Model

Near Field Communication (NFC) is a short range wireless communication technology allowing to communicate mobile devices within close proximity. It provides opportunity for service providers to offer various value added services to customers. NFC technology allows the usage of wide range of applications and eliminates the obligation to carry additional components other than the mobile device such as credit or payment cards, tickets, identification cards or keys. Despite its technological advantages over alternative ones, the NFC business ecosystems and services are yet to take off. The problems mainly arise with the business issues triggered by different and mostly conflicting needs of many actors in the ecosystem and several additional technical issues. In this study, by adopting a role-based service ecosystem modeling, we propose an NFC ecosystem model which perfectly specifies the roles in the ecosystem, and defines set of activities for each role, and communication structure. We analyzed NFC ecosystem in three phases as pre-installation, installation, and service usage. We have defined the activities and communication structure in the first two phases, and finally investigated the service usage phase in three different operating modes of NFC. After giving the details of the proposed ecosystem model, two use cases are given to validate the developed ecosystem model. We complete our study by discussing the requirement satisfaction.

Social Credential-Based Role Recommendation and Patient Privacy Control in Medical Emergency

Emerging Health Information Technologies (HIT), such as Electronic Health Records (EHR) and Personal Health Records (PHR) systems, facilitate access to and sharing of patients’ medical data in a distributed environment. The privacy protection of medical information is a pressing issue with the use of these medical technologies. In this paper, the authors present a Patient-controlled Privacy Protection Framework, which allows a patient to specify his or her own privacy policies on their own medical data no matter where they are stored. In addition, the authors extend this basic framework to medical emergency situations, where roles and users may not be limited to an organizational boundary. To enforce patient’s privacy policies even in emergency situations, the authors propose the Situation Role-based Privacy Control model and a social network-based user credential discovery method to recommend a situation role to candidate users. The authors present a mobile prototype system and two experiments to show the feasibility of our approach.

Bridging the gap between business process models and service-oriented architectures with reference to the grid environment

In recent years, organisations have been seeking technological solutions for enacting their business process models using ad-hoc and heuristic approaches. However, limited results have been obtained due to the expansion of business processes across geographical boundaries and the absence of structured methods, frameworks and/or Information Technology (IT) infrastructures to enact these processes. In an attempt to enact business process models using distributed technologies, we introduce a novel architectural framework to bridge the gap between business process models and Grid-aware Service-Oriented Architectures (GSOA). BPMSOA framework is aligned with the Model-Driven Engineering (MDE) approach and is instantiated for role-based business process models [in particular Role Activity Diagramming (RAD)], using mobile process languages such as pi-ADL. The evaluation of the BPMSOA framework using the Submission process from the digital libraries domain has revealed that role-based business process models can be successfully enacted in GSOA environments with certain limitations.

Making intelligent business decisions by mining the implicit relation from bloggers’ posts

More and more people use blogs to write down their ideas, opinions and individual thoughts. Mining blogs will obtain useful information, which can support business policy and decision-making, especially in analyzing product popularity. In this study, we mine the features of persons as implicit relations between the content of the bloggers' posts and the bloggers. These kinds of implicit relations, which are also semantic relations, is called the Blogger Role. To mine this semantic relation, Wordnet is used to extract the Blogger Role and the features of Blogger Role. To get an appropriate Blogger Role, we cluster all bloggers' posts and use the clustering result to revise the Blogger Role obtained by single document analysis. To get more relevant retrieval results, we combine this implicit relation with the classical retrieval model by the Blogger Role-based model. The combination is performed by the explicit model and implicit model. Results of experiments on TREC corpus show that Blogger Role reveals bloggers' characters and mining Blogger Roles is useful in analyzing the popularity of products.

Service analytics framework for web-delivered services

Web-delivered service is an emerging approach for IT service to reduce IT service cost and improve delivery efficiency by leveraging the partnership and web technology. This paper proposes a three-tier analytical framework of web-delivered service to improve business deign based on the centralised information from the platform. At business model design tier, a role-based service ecosystem modelling method is presented to contain the duplication and evolvement of participants' functionalities within the same model. Through the model, we can analyse the impact of business model on the business performance. At service analytics tier, we summarise the available data and categorise the operational analysis by roles. At self-transform tier, several potential functionalities are listed to help end client to do business transformation by themselves. Based on such framework, a case study in mini-ERP services is presented to illustrate how the analytics technology can help in business design of web-delivered service.

A Formal Virtual Enterprise Access Control Model

A virtual enterprise (VE) refers to a cooperative alliance of legally independent enterprises, institutions, or single persons that collaborate with each other by sharing business processes and resources across enterprises in order to raise enterprise competitiveness and reduce production costs. Successful VEs require complete information transparency and suitable resource sharing among coworkers across enterprises. Hence, this investigation proposes a formal flexible integration solution, named the formal VE access control (VEAC) model, based on the role-based AC model, to integrate and share distributed resources owned by VE members. The formal VEAC model comprises a fundamental VEAC model, a project AC policy (PACP) language model, and a model construction methodology. The fundamental VEAC model manages VE resources and the resources of participating enterprises, in which various project relationships are presented to facilitate different degrees of resource sharing across projects and enterprise boundaries, and cooperative modes among VE roles are presented to enable collaboration among coworkers in a VE. This PACP language model features object-subject-action-condition AC policies that jointly determine user access authorizations. In addition, the methodology supplies a systematic method to identify fundamental elements of the VEAC model and to establish assignments between elements and relations.

Specification and verification of security requirements in a programming model for decentralized CSCW systems

We present, in this paper, a role-based model for programming distributed CSCW systems. This model supports specification of dynamic security and coordination requirements in such systems. We also present here a model-checking methodology for verifying the security properties of a design expressed in this model. The verification methodology presented here is used to ensure correctness and consistency of a design specification. It is also used to ensure that sensitive security requirements cannot be violated when policy enforcement functions are distributed among the participants. Several aspect-specific verification models are developed to check security properties, such as task-flow constraints, information flow, confidentiality, and assignment of administrative privileges.

A layered workflow knowledge Grid/P2P architecture and its models for future generation workflow systems

This paper addresses the scalability issue on workflow systems using the knowledge Grid/P2P computing environment. As a feasible solution for the scalability issue, we design a Layered Workflow Knowledge Grid/P2P Architecture. The architecture is based upon a conceptual and generic framework that considers various perspectives for creating workflow knowledge Grid/P2P architectures. In order to show how the architecture is applicable in making up a future generation workflow system, we propose three types of workflow knowledge models and a physical architecture that is possibly configurable from the layered workflow knowledge Grid/P2P architecture. That is, the architecture has a 3-layered hierarchical configuration–procedure-layer, role-layer, and actor-layer–and the three workflow knowledge models–ICN-based model, role-based model, and actor-based model–are the workflow knowledge representations on Grid/P2P nodes in the corresponding layers, respectively. In particular, the most critical rationale of this paper is based on the fact that the nature of the knowledge Grid/P2P computing environment ought to be fitted very well into building a platform for future generation workflow systems characterized by maximally parallel and very large scale workflow procedures that are frequently observed in very large scale enterprizes. And we strongly believe that the rationale must be acceptable. Conclusively, the architecture and the models proposed in this paper shall be useful for not only maximizing the usability of computing facilities in the enterprize but also appropriately handling the scalability issue of its underlined future generation workflow management system in order to cope with massively parallel and very large scale workflow applications.

Psychotherapy-Driven Supervision: Integrating Counseling Theories into Role-Based Supervision

Mental health counselors often play an integral part in the training and supervision of students and new practitioners. Whether they are teaching clinical skills in academic settings, providing on-site supervision for practicum and internship students, or serving as clinical supervisors for unlicensed or less experienced counselors, supervision is a relevant component of mental health practice. Designed as a practical approach that builds on the clinical strengths of mental health counselors, psychotherapy-driven supervision advocates blending psychotherapy-based approaches to supervision with role-based models of supervision. Strengths and weaknesses of psychotherapy-based approaches are discussed. Detailed descriptions of the teacher, counselor, and consultant roles of supervisors are presented. Psychotherapy-driven supervision is illustrated for three theoretical approaches: humanistic-relationship oriented, cognitive-behavioral, and solution-focused.

A Role-Based Multilevel Security Access Control Model

This paper presents a Role-Based Multilevel Security Access Control (RBMSAC) model to address the multilevel security issue. In the proposed model, we introduce the concepts of secure permissions, secure objects (secure sub object hierarchy), and secure operations, and propose the method of decomposing a multilevel-security object into a number of sub objects and organizing them into a tree structure. With the embedded security criterion expressions in the secure sub objects and the embedded security criterion subset in the relevant secure operations, the model achieves the multilevel security access control by evaluating these security criterion expressions using the relevant security criterion subset. In addition to presenting the methods of generating new components, we also analyze the relationships among the new components, and discuss the rationale of the proposed model.

An algebraic approach for modelling organisation, roles and contexts in MAS

Governing the ever growing complexity of artificial systems on the one hand requires a number of expressive abstractions and different levels of interpretation, on the other hand suggests the adoption of formal / mathematical tools to (at least partially) model and predict the system behaviour. By adopting agent-oriented abstractions as the starting point, we argue that organisation, coordination and security all insist on the same conceptual space --- that is, static / dynamic relations / interactions among agents ---, which also represents one of the main sources of complexity for MAS, and for artificial systems in general, as well. The notion of ACC (agent coordination context) is used in this paper as the unifying core abstraction of a framework that encompasses all such issues, promoting the integration of organisation, coordination, and security. Such a framework, called RBAC-MAS, is expressed through a process algebraic model which integrates the classic organisational issues of role-based models (like RBAC) and the more recent works on interaction and coordination in MAS.

A collaborative approach to assembly sequence planning

Distributed product development requires collaborative work among team members. For the sake of supporting assembly planning activities involving geographically dispersed designers, this paper presents an approach of collaborative assembly sequence planning to validate the assemblability of parts and subassemblies rapidly. In order to increase the planning efficiency and support the collaborative planning, role-based model is exploited to compress or simplify the product. In role-based model, the B-rep models are simplified according to the permissions associated with the role, so the surfaces invisible from outside of the model are removed. In collaborative planning, the planning tasks are assigned to different designers that carry out the collaborative planning, respectively. In this paper, a knowledge-based approach is proposed to the assembly sequence planning problem. This research shows that the typical or standard CSBAT (Connection Semantics Based Assembly Tree) can be applied to a given assembly problem. This paper presents the structure of the Co-ASP (Collaborative Assembly Sequence Planning System) and provides an example to illustrate the collaborative planning approach.

A role-based PMI security model for e-government

We introduce the general AC (attribute certificate), the role specification AC and the role assignment AC. We discuss the role-based PMI (Privilege Management Infrastructure) architecture. The role-based PMI (Public-Key Infrastructure) secure model for E-government is researched by combining the role-based PMI with PKI architecture (Public Key Infrastructure). The model has advantages of flexibility, convenience, less storage space and less network consumption etc. We are going to use the secure model in the E-government system.

A Constrained Role-Based Delegation Model

Delegation is an important security policy that should be supported by RBAC model. The basic idea of delegation is that some active entity in a system delegates authority to another active entity to carry out some functions on behalf of the former. The grantor of the delegated roles should be responsible for the usage of them, so constraints on the usage of the delegated roles are critical components of the whole delegation model. Currently, there’re some models that extend RBAC model to support role delegation. However, their supports for constraints on the usage of delegated roles are very limited. This paper presents the requirements of role-based delegation, including temporary constraints, regular role dependency constraints, partial delegation constraints and propagation constraints. The former two kinds of constraints are modeled with a formal model – CRDM, which provides the foundation for applications in need of the constrained delegation.

Flexible and secure Internet-based discussion of variable medical image data

Patients with rare diseases are often treated in multicentric trials spread over national boarders. Mailing, archiving and retrieval of forms, radiographic images and images of specimens account for a substantial workload at trial centers and participating institutions like hospitals and physician offices. The design of an object clearinghouse by using Internet technologies promised to come up to prior investigated expectations. The clearinghouse had—among other requirements—to be ready to implement new features easily, to be as independent from time and place as possible and reasonable, to work in several heterogeneous computing environments of the medical and technical experts, to use a very simple client and to be cheap. Especially, the DICOM-Standard had to be considered as well as the management of access rights in a role-based model. The clearinghouse is implemented and is currently under practical evaluation within a pilot project.

Strategic ambiguities in the process of consent: role of the family in decisions to forgo life-sustaining treatment for incompetent elderly patients.

This paper evaluates the Hong Kong approach to consent regarding the forgoing of life-sustaining treatment for incompetent elderly patients. It analyzes the contextualized approach in the Hong Kong process-based, consensus-building model, in contrast to other role-based models which emphasize the establishment of a system of formal laws and a clear locus of decisional authority. Without embracing relativism, the paper argues that the Hong Kong model offers an instructive example of how strategic ambiguities can both make good sense within particular cultural context and serve important moral goals.