http://dl.gi.de/handle/20.500.12116/22179 2026-07-23T13:18:20Z http://dl.gi.de/handle/20.500.12116/22191 Service Oriented Security Architecture Opincaru, Cristian; Gheorghe, Gabriela Reichert, Manfred; Strecker, Stefan; Turowski, Klaus As Service Oriented Architectures (SOA) and Web services are becoming widely deployed, the problematic of security is far from being solved. In an attempt to address this issue, the industry proposed several extensions to the SOAP protocol that currently reached different levels of standardization. However, no architectural guidelines have yet been proposed. In this paper we first outline the security challenges and the specifications that address these challenges and then present our concept - the Service Oriented Security Architecture, SOSA . We argue that the different security functions (authentication, authorization, audit, etc.) should be realized as different stand-alone Web services - security services. These security services can then be chained together by means of Enterprise Application Integration (EAI) techniques such as message routing on Enterprise Services Buses (ESB). Next, we will present a prototypical implementation of this framework and describe our experiences so far. We show that by distributing the security functions, a more flexible architecture can be designed that would lower the costs associated with implementation, administration and maintenance. 2007-01-01T00:00:00Z http://dl.gi.de/handle/20.500.12116/22195 BPMN-Q: A Language to Query Business Processes Awad, Ahmed Reichert, Manfred; Strecker, Stefan; Turowski, Klaus With the growing role business processes play in today’s business life, they are being seen as an asset for the organization. With hundreds of process models developed by different process designers it would be helpful to look up the repository for models that could handle a similar situation before developing new ones. In this paper we introduce a new visual query language for business processes. The language addresses processes definitions. It extends BPMN for its abstract syntax as BPMN is a standard visual notation for modeling business processes. The overall architecture of the system in which the language can fit, in addition to the details of the query processing are also discussed. 2007-01-01T00:00:00Z http://dl.gi.de/handle/20.500.12116/22193 Modelling of Cross-Organizational Business Processes - Current Methods and Standards Ziemann, Jörg; Matheis, Thomas; Freiheit, Jörn Reichert, Manfred; Strecker, Stefan; Turowski, Klaus Not only since the upcoming of Service-oriented Architectures the modelling of cross-organizational business processes is a heavily investigated field comprising dozens of standards based on different concepts. New techniques on the implementation site, e.g. Web Service orchestration and choreography, further extended the possibilities and requirements on such standards. To systematically order and present a comprehensive state of the art of relevant methods and standards this paper first describes requirements that occur in cross-organizational business processes both for concepts and modelling languages. Then the most important state of the art concepts for modelling cross-organizational processes are described, followed by a list of selected modelling languages. Based on the requirements defined before, a selection of languages is analysed in greater detail. 2007-01-01T00:00:00Z http://dl.gi.de/handle/20.500.12116/22194 Using BPEL as a workflow engine for local enterprise applications Biri, Nicolas; Bauler, Pascal; Feltz, Fernand; Médoc, Nicolas; Thomase, Céline Reichert, Manfred; Strecker, Stefan; Turowski, Klaus This paper gives an overview on the integration of a BPEL workflow engine into an enterprise application in order to decouple business processes and application code. The technical complexity of this innovative approach is hidden by means of Model Driven Software Development (MDSD) techniques and several component frameworks. By referring to a research project realised in collaboration of the Centre de Recherche Public – Garbiel Lippmann and the Luxembourg National Family Benefits Fund (CNPF), with the overall goal to optimise the IT environment of the CNPF, this paper shows how the proposed approach is particularly adapted to agile and iterative development projects. 2007-01-01T00:00:00Z