Data Protection in Organization Workflows and Service Oriented Architectures

点击翻译按钮获取中文摘要

We address problems of data protection encountered in organizations with complex workflows, where data access privileges change depending on the workflow steps being performed by users. Such organizations are found in the area of banking, health care, government, the military etc. By using disciplined software engineering methods based on formal techniques, we plan to provide a solid base on which data protection systems and software for such organizations can be built. The data protection requirements for such organizations are often found in normative sources, which can be laws, regulations, or best practice standards. Service-Oriented Architecture (SOA) is the architectural paradigm that we will use to conceptualize such organizations: it is a business-centric paradigm that supports integrating business processes as linked, repeatable business tasks, or services. It includes concepts for Web Services, the Grid and the Cloud. The data protection software for such organizations should be thoroughly verified and tested, and in the end certified to comply with normative requirements.