{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,11,11]],"date-time":"2026-11-11T00:46:01Z","timestamp":1794357961853,"version":"4.9.0"},"publisher-location":"Berlin, Heidelberg","reference-count":21,"publisher":"Springer Berlin Heidelberg","isbn-type":[{"value":"9783540857341","type":"print"},{"value":"9783540857358","type":"electronic"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"DOI":"10.1007\/978-3-540-85735-8_11","type":"book-chapter","created":{"date-parts":[[2008,8,22]],"date-time":"2008-08-22T08:47:03Z","timestamp":1219394823000},"page":"100-117","source":"Crossref","is-referenced-by-count":7,"title":["Controlling Usage in Business Process Workflows through Fine-Grained Security Policies"],"prefix":"10.1007","author":[{"given":"Benjamin","family":"Aziz","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alvaro","family":"Arenas","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fabio","family":"Martinelli","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ilaria","family":"Matteucci","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Paolo","family":"Mori","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","reference":[{"key":"11_CR1","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"123","DOI":"10.1007\/978-3-540-30470-8_30","volume-title":"On the Move to Meaningful Internet Systems 2004: OTM 2004 Workshops","author":"F. Baiardi","year":"2004","unstructured":"Baiardi, F., Martinelli, F., Mori, P., Vaccarelli, A.: Improving Grid Services Security with Fine Grain Policies. In: Meersman, R., Tari, Z., Corsaro, A. (eds.) OTM-WS 2004. LNCS, vol.\u00a03292, pp. 123\u2013134. Springer, Heidelberg (2004)"},{"key":"11_CR2","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"269","DOI":"10.1007\/11596141_21","volume-title":"Service-Oriented Computing - ICSOC 2005","author":"L. Baresi","year":"2005","unstructured":"Baresi, L., Guinea, S.: Towards Dynamic Monotoring of WS-BPEL Processes. In: Benatallah, B., Casati, F., Traverso, P. (eds.) ICSOC 2005. LNCS, vol.\u00a03826, pp. 269\u2013282. Springer, Heidelberg (2005)"},{"key":"11_CR3","unstructured":"BEA, IBM, Microsoft, SAP, and Siebel. Business Process Execution Language for Web Services Version 1.1. Public Specification (2003)"},{"key":"11_CR4","unstructured":"BEA, IBM, Microsoft, SAP, and Siebel. Web Services Business Process Execution Language Version 2.0. OASIS Standard (2007)"},{"key":"11_CR5","doi-asserted-by":"publisher","first-page":"275","DOI":"10.1109\/ICWS.2006.21","volume-title":"Proceedings of the 2006 IEEE International Conference on Web Services","author":"E. Bertino","year":"2006","unstructured":"Bertino, E., Crampton, J., Paci, F.: Access Control and Authorization Constraints for WS-BPEL. In: Proceedings of the 2006 IEEE International Conference on Web Services, Chicago, Illinois, USA, pp. 275\u2013284. IEEE Computer Society, Los Alamitos (2006)"},{"key":"11_CR6","doi-asserted-by":"publisher","first-page":"164","DOI":"10.1145\/352600.352623","volume-title":"Proceedings of the 7th ACM Conference on Computer and Communications Security (CCS 2000)","author":"P.A. Bonatti","year":"2000","unstructured":"Bonatti, P.A., di Vimercati, S.D.C., Samarati, P.: A Modular Approach to Composing Access Control Policies. In: Proceedings of the 7th ACM Conference on Computer and Communications Security (CCS 2000), Athens, Greece, November 2000, pp. 164\u2013173. ACM Press, New York (2000)"},{"key":"11_CR7","volume-title":"SWS","author":"J. Bryans","year":"2005","unstructured":"Bryans, J.: Reasoning about xacml policies using csp. In: SWS. ACM Press, New York (2005)"},{"key":"11_CR8","doi-asserted-by":"publisher","first-page":"135","DOI":"10.1145\/507711.507732","volume-title":"SACMAT 2002: Proceedings of the seventh ACM symposium on Access control models and technologies","author":"D. Chadwick","year":"2002","unstructured":"Chadwick, D., Otenko, A.: The permis x.509 role based privilege management infrastructure. In: SACMAT 2002: Proceedings of the seventh ACM symposium on Access control models and technologies, pp. 135\u2013140. ACM Press, New York (2002)"},{"key":"11_CR9","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"1505","DOI":"10.1007\/978-3-540-76843-2_26","volume-title":"On the Move to Meaningful Internet Systems 2007: CoopIS, DOA, ODBASE, GADA, and IS","author":"M. Colombo","year":"2007","unstructured":"Colombo, M., Martinelli, F., Mori, P., Petrocchi, M., Vaccarelli, A.: Fine grained access control with trust and reputation management for globus. In: Meersman, R., Tari, Z. (eds.) OTM 2007, Part II. LNCS, vol.\u00a04804, pp. 1505\u20131515. Springer, Heidelberg (2007)"},{"key":"11_CR10","unstructured":"Crampton, J.: An Algebraic Approach to the Analysis of Constrained Workflow Systems. In: Proceedings of the 3rd Workshop on Foundations of Computer Security, pp. 61\u201374 (2004)"},{"key":"11_CR11","volume-title":"Proceedings of the IEEE 2007 International Conference on Web Services (ICWS 2007)","author":"G. Decker","year":"2007","unstructured":"Decker, G., Kopp, O., Leymann, F., Weske, M.: BPEL4Chor: Extending BPEL for Modeling Choreographies. In: Proceedings of the IEEE 2007 International Conference on Web Services (ICWS 2007), Salt Lake City, Utah, USA. IEEE Computer Society, Los Alamitos (2007)"},{"key":"11_CR12","unstructured":"Foster, I., Kesselman, C., Pearlman, L., Tuecke, S., Welch, V.: A community authorization service for group collaboration. In: Proceedings of the3rd IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY 2002), pp. 50\u201359 (2002)"},{"key":"11_CR13","unstructured":"GridTrust. Deliverable D5.1(M19) Specifications of Applications and Test Cases (2007)"},{"key":"11_CR14","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"124","DOI":"10.1007\/978-3-540-79230-7_9","volume-title":"Web Services and Formal Methods","author":"F. Martinelli","year":"2008","unstructured":"Martinelli, F., Matteucci, I.: Synthesis of web services orchestrators in a timed setting. In: Dumas, M., Heckel, R. (eds.) WS-FM 2007. LNCS, vol.\u00a04937, pp. 124\u2013138. Springer, Heidelberg (2008)"},{"key":"11_CR15","doi-asserted-by":"crossref","first-page":"81","DOI":"10.1109\/ENABL.2004.9","volume-title":"Proceedings of the Thirteenth IEEE International Workshops on Enabling Technologies (WETICE 2004): Infrastructure for Collaborative Enterprises","author":"J. Mendling","year":"2004","unstructured":"Mendling, J., Strembeck, M., Stermsek, G., Neumann, G.: An Approach to Extract RBAC Models from BPEL4WS Processes. In: Proceedings of the Thirteenth IEEE International Workshops on Enabling Technologies (WETICE 2004): Infrastructure for Collaborative Enterprises, Modena, Italy, pp. 81\u201386. IEEE Computer Society, Los Alamitos (2004)"},{"key":"11_CR16","unstructured":"Pearlman, L., Kesselman, C., Welch, V., Foster, I., Tuecke, S.: The community authorization service: Status and future. In: Proceedings of Computing in High Energy and Nuclear Physics (CHEP 2003): ECONF (2003) C0303241:TUBT003"},{"key":"11_CR17","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"83","DOI":"10.1007\/978-3-540-74409-2_11","volume-title":"Trust, Privacy and Security in Digital Business","author":"A. Pretschner","year":"2007","unstructured":"Pretschner, A., Massacci, F., Hilty, M.: Usage control in service-oriented architectures. In: Lambrinoudakis, C., Pernul, G., Tjoa, A.M. (eds.) TrustBus. LNCS, vol.\u00a04657, pp. 83\u201393. Springer, Heidelberg (2007)"},{"key":"11_CR18","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"350","DOI":"10.1007\/11526841_24","volume-title":"FM 2005: Formal Methods","author":"Z. Qiu","year":"2005","unstructured":"Qiu, Z., Wang, S., Pu, G., Zhao, X.: Semantics of BPEL4WS-Like Fault and Compensation Handling. In: Fitzgerald, J.S., Hayes, I.J., Tarlecki, A. (eds.) FM 2005. LNCS, vol.\u00a03582, pp. 350\u2013365. Springer, Heidelberg (2005)"},{"issue":"2","key":"11_CR19","doi-asserted-by":"publisher","first-page":"38","DOI":"10.1109\/2.485845","volume":"29","author":"R.S. Sandhu","year":"1996","unstructured":"Sandhu, R.S., Coyne, E.J., Feinstein, H.L., Youman, C.E.: Role-based access control models. Computer\u00a029(2), 38\u201347 (1996)","journal-title":"Computer"},{"issue":"4","key":"11_CR20","doi-asserted-by":"publisher","first-page":"566","DOI":"10.1145\/950191.950196","volume":"6","author":"M. Thompson","year":"2003","unstructured":"Thompson, M., Essiari, A., Mudumbai, S.: Certificate-based authorization policy in a pki environment. ACM Transactions on Information and System Security (TISSEC)\u00a06(4), 566\u2013588 (2003)","journal-title":"ACM Transactions on Information and System Security, (TISSEC)"},{"key":"11_CR21","doi-asserted-by":"publisher","first-page":"180","DOI":"10.1145\/1133058.1133084","volume-title":"SACMAT 2006: Proceedings of the eleventh ACM symposium on Access control models and technologies","author":"X. Zhang","year":"2006","unstructured":"Zhang, X., Nakae, M., Covington, M.J., Sandhu, R.: A usage-based authorization framework for collaborative computing systems. In: SACMAT 2006: Proceedings of the eleventh ACM symposium on Access control models and technologies, pp. 180\u2013189. ACM Press, New York (2006)"}],"container-title":["Lecture Notes in Computer Science","Trust, Privacy and Security in Digital Business"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-540-85735-8_11.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2021,4,27]],"date-time":"2021-04-27T07:47:55Z","timestamp":1619509675000},"score":1,"resource":{"primary":{"URL":"http:\/\/link.springer.com\/10.1007\/978-3-540-85735-8_11"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[null]]},"ISBN":["9783540857341","9783540857358"],"references-count":21,"URL":"https:\/\/doi.org\/10.1007\/978-3-540-85735-8_11","relation":{"is-part-of":[{"id-type":"doi","id":"https:\/\/doi.org\/10.1007\/978-3-540-85735-8","asserted-by":"object"}]},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[]}}