<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-00677854</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-18T01:38:12+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="en">A logical framework for reasoning about delegation policies in workflow management systems</title>
            <author role="crp">
              <persName>
                <forename type="first">Khaled</forename>
                <surname>Gaaloul</surname>
              </persName>
              <email type="md5">f58b2a59d3410f310d1dff4c2ecf3b80</email>
              <email type="domain">gmail.com</email>
              <idno type="idhal" notation="numeric">864631</idno>
              <idno type="halauthorid" notation="string">115577-864631</idno>
              <affiliation ref="#struct-107894"/>
              <affiliation ref="#struct-394711"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Erik</forename>
                <forename type="middle">H.A.</forename>
                <surname>Proper</surname>
              </persName>
              <email type="md5">9b6214bd359aa0ffce628e4ab1370d55</email>
              <email type="domain">list.lu</email>
              <idno type="idhal" notation="numeric">983589</idno>
              <idno type="halauthorid" notation="string">598241-983589</idno>
              <affiliation ref="#struct-394711"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Ehtesham</forename>
                <surname>Zahoor</surname>
              </persName>
              <email type="md5">bc0f4b269063c5d76a62478a250ba88f</email>
              <email type="domain">loria.fr</email>
              <idno type="idhal" notation="numeric">855182</idno>
              <idno type="halauthorid" notation="string">362577-855182</idno>
              <affiliation ref="#struct-107894"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">François</forename>
                <surname>Charoy</surname>
              </persName>
              <email type="md5">38d3d0d03b45cf08f44d8e4975809999</email>
              <email type="domain">loria.fr</email>
              <idno type="idhal" notation="string">francois-charoy</idno>
              <idno type="idhal" notation="numeric">1190</idno>
              <idno type="halauthorid" notation="string">20003-1190</idno>
              <idno type="ORCID">https://orcid.org/0000-0002-0640-6613</idno>
              <idno type="IDREF">https://www.idref.fr/031091849</idno>
              <affiliation ref="#struct-107894"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Claude</forename>
                <surname>Godart</surname>
              </persName>
              <email type="md5">8f9ea12bd53f11d04c806107477b5023</email>
              <email type="domain">loria.fr</email>
              <idno type="idhal" notation="numeric">830462</idno>
              <idno type="halauthorid" notation="string">111565-830462</idno>
              <idno type="IDREF">https://www.idref.fr/031091733</idno>
              <affiliation ref="#struct-107894"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>François</forename>
                <surname>Charoy</surname>
              </persName>
              <email type="md5">38d3d0d03b45cf08f44d8e4975809999</email>
              <email type="domain">loria.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2012-09-13 07:00:03</date>
              <date type="whenModified">2025-11-04 12:03:22</date>
              <date type="whenReleased">2012-03-13 13:24:01</date>
              <date type="whenProduced">2011-12-01</date>
              <date type="whenEndEmbargoed">2012-09-13</date>
              <ref type="file" target="https://inria.hal.science/hal-00677854v1/document">
                <date notBefore="2012-09-13"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://inria.hal.science/hal-00677854v1/file/IJICS040405_GAALOUL.pdf" id="file-677854-1114122">
                <date notBefore="2012-09-13"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="103142">
                <persName>
                  <forename>François</forename>
                  <surname>Charoy</surname>
                </persName>
                <email type="md5">38d3d0d03b45cf08f44d8e4975809999</email>
                <email type="domain">loria.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-00677854</idno>
            <idno type="halUri">https://inria.hal.science/hal-00677854</idno>
            <idno type="halBibtex">gaaloul:hal-00677854</idno>
            <idno type="halRefHtml">&lt;i&gt;International Journal of Information and Computer Security&lt;/i&gt;, 2011, 4 (4), pp.365-388. &lt;a target="_blank" href="https://dx.doi.org/10.1504/IJICS.2011.044825"&gt;&amp;#x27E8;10.1504/IJICS.2011.044825&amp;#x27E9;&lt;/a&gt;</idno>
            <idno type="halRef">International Journal of Information and Computer Security, 2011, 4 (4), pp.365-388. &amp;#x27E8;10.1504/IJICS.2011.044825&amp;#x27E9;</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-677854-1114122"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INRIA">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="INRIA_TEST">INRIA - Institut National de Recherche en Informatique et en Automatique</idno>
            <idno type="stamp" n="LORIA2">Publications du LORIA</idno>
            <idno type="stamp" n="INRIA-NANCY-GRAND-EST">INRIA Nancy - Grand Est</idno>
            <idno type="stamp" n="TESTALAIN1">TESTALAIN1</idno>
            <idno type="stamp" n="UNIV-LORRAINE">Université de Lorraine</idno>
            <idno type="stamp" n="INRIA2">INRIA 2</idno>
            <idno type="stamp" n="LORIA">Laboratoire Lorrain de Recherche en Informatique et ses Applications</idno>
            <idno type="stamp" n="LORIA-NSS" corresp="LORIA">Department of Networks, Systems and Services</idno>
            <idno type="stamp" n="AM2I-UL">Pôle scientifique Automatique, Mathématiques, Informatique et leurs Intéractions de l'Université de Lorraine</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="2">International</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="en">A logical framework for reasoning about delegation policies in workflow management systems</title>
                <author role="crp">
                  <persName>
                    <forename type="first">Khaled</forename>
                    <surname>Gaaloul</surname>
                  </persName>
                  <email type="md5">f58b2a59d3410f310d1dff4c2ecf3b80</email>
                  <email type="domain">gmail.com</email>
                  <idno type="idhal" notation="numeric">864631</idno>
                  <idno type="halauthorid" notation="string">115577-864631</idno>
                  <affiliation ref="#struct-107894"/>
                  <affiliation ref="#struct-394711"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Erik</forename>
                    <forename type="middle">H.A.</forename>
                    <surname>Proper</surname>
                  </persName>
                  <email type="md5">9b6214bd359aa0ffce628e4ab1370d55</email>
                  <email type="domain">list.lu</email>
                  <idno type="idhal" notation="numeric">983589</idno>
                  <idno type="halauthorid" notation="string">598241-983589</idno>
                  <affiliation ref="#struct-394711"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Ehtesham</forename>
                    <surname>Zahoor</surname>
                  </persName>
                  <email type="md5">bc0f4b269063c5d76a62478a250ba88f</email>
                  <email type="domain">loria.fr</email>
                  <idno type="idhal" notation="numeric">855182</idno>
                  <idno type="halauthorid" notation="string">362577-855182</idno>
                  <affiliation ref="#struct-107894"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">François</forename>
                    <surname>Charoy</surname>
                  </persName>
                  <email type="md5">38d3d0d03b45cf08f44d8e4975809999</email>
                  <email type="domain">loria.fr</email>
                  <idno type="idhal" notation="string">francois-charoy</idno>
                  <idno type="idhal" notation="numeric">1190</idno>
                  <idno type="halauthorid" notation="string">20003-1190</idno>
                  <idno type="ORCID">https://orcid.org/0000-0002-0640-6613</idno>
                  <idno type="IDREF">https://www.idref.fr/031091849</idno>
                  <affiliation ref="#struct-107894"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Claude</forename>
                    <surname>Godart</surname>
                  </persName>
                  <email type="md5">8f9ea12bd53f11d04c806107477b5023</email>
                  <email type="domain">loria.fr</email>
                  <idno type="idhal" notation="numeric">830462</idno>
                  <idno type="halauthorid" notation="string">111565-830462</idno>
                  <idno type="IDREF">https://www.idref.fr/031091733</idno>
                  <affiliation ref="#struct-107894"/>
                </author>
              </analytic>
              <monogr>
                <idno type="halJournalId" status="VALID">39407</idno>
                <idno type="issn">1744-1765</idno>
                <idno type="eissn">1744-1773</idno>
                <title level="j">International Journal of Information and Computer Security</title>
                <imprint>
                  <publisher>Inderscience</publisher>
                  <biblScope unit="volume">4</biblScope>
                  <biblScope unit="issue">4</biblScope>
                  <biblScope unit="pp">365-388</biblScope>
                  <date type="datePub">2011-12-01</date>
                </imprint>
              </monogr>
              <idno type="doi">10.1504/IJICS.2011.044825</idno>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="en">English</language>
            </langUsage>
            <textClass>
              <keywords scheme="author">
                <term xml:lang="en">reasoning tools</term>
                <term xml:lang="en">workflow management</term>
                <term xml:lang="en">task delegation</term>
                <term xml:lang="en">access control</term>
                <term xml:lang="en">authorisation policy</term>
                <term xml:lang="en">event calculus</term>
                <term xml:lang="en">business process security</term>
                <term xml:lang="en">reasoning tools.</term>
              </keywords>
              <classCode scheme="acm" n="H.1.2.1">H.: Information Systems/H.1: MODELS AND PRINCIPLES/H.1.2: User/Machine Systems/H.1.2.1: Human information processing</classCode>
              <classCode scheme="acm" n="H.4.1.6">H.: Information Systems/H.4: INFORMATION SYSTEMS APPLICATIONS/H.4.1: Office Automation/H.4.1.6: Workflow management</classCode>
              <classCode scheme="halDomain" n="info.info-ni">Computer Science [cs]/Networking and Internet Architecture [cs.NI]</classCode>
              <classCode scheme="halTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halOldTypology" n="ART">Journal articles</classCode>
              <classCode scheme="halTreeTypology" n="ART">Journal articles</classCode>
            </textClass>
            <abstract xml:lang="en">
              <p>Task delegation presents one of the business process security leitmotifs. It defines a mechanism that bridges the gap between workflow and access control systems. Delegation completion and authorisation enforcement are specified under specific constraints so-called events. In this article, we aim to reason about delegation events to model task delegation and to specify delegation policies using a logical framework. To that end, we propose an event-based task delegation model to control the delegation execution. We then identify relevant events responsible for the dynamic enforcement of delegation policies. Further, we define a task-oriented access control model to specify delegation constraints into authorisation policies. Finally, we propose a technique to automate the delegation policies integration. Using event calculus, we develop a reasoning tool to control the delegation execution and to increase the compliance of all delegation changes in the existing policy of the workflow.</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="researchteam" xml:id="struct-107894" status="OLD">
          <idno type="RNSR">200921239B</idno>
          <orgName>Services and Cooperation</orgName>
          <orgName type="acronym">SCORE</orgName>
          <date type="end">2014-07-31</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/equipes/score</ref>
          </desc>
          <listRelation>
            <relation active="#struct-129671" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-423085" type="direct"/>
            <relation active="#struct-206040" type="indirect"/>
            <relation active="#struct-411575" type="indirect"/>
            <relation active="#struct-413289" type="indirect"/>
            <relation name="UMR7503" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="researchteam" xml:id="struct-394711" status="INCOMING">
          <orgName>CRP Henri Tudor</orgName>
          <desc>
            <address>
              <country key="LU"/>
            </address>
          </desc>
          <listRelation>
            <relation active="#struct-96532" type="direct"/>
            <relation active="#struct-371421" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-129671" status="VALID">
          <idno type="RNSR">198618246Y</idno>
          <idno type="ROR">https://ror.org/03fcjvn64</idno>
          <orgName>Centre Inria de l'Université de Lorraine</orgName>
          <desc>
            <address>
              <addrLine>615 rue du Jardin Botanique 54600 Villers-lès-Nancy</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/nancy</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-300009" status="VALID">
          <idno type="ROR">https://ror.org/02kvxyf05</idno>
          <orgName>Institut National de Recherche en Informatique et en Automatique</orgName>
          <orgName type="acronym">Inria</orgName>
          <desc>
            <address>
              <addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.inria.fr/en/</ref>
          </desc>
        </org>
        <org type="department" xml:id="struct-423085" status="VALID">
          <orgName>Department of Networks, Systems and Services</orgName>
          <orgName type="acronym">LORIA - NSS</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.loria.fr/en/research/departments/networks-systems-and-services/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-206040" type="direct"/>
            <relation active="#struct-300009" type="indirect"/>
            <relation active="#struct-411575" type="indirect"/>
            <relation active="#struct-413289" type="indirect"/>
            <relation name="UMR7503" active="#struct-441569" type="indirect"/>
          </listRelation>
        </org>
        <org type="laboratory" xml:id="struct-206040" status="VALID">
          <idno type="IdRef">067077927</idno>
          <idno type="ISNI">0000000121795429</idno>
          <idno type="RNSR">198912571S</idno>
          <idno type="IdUnivLorraine">[UL]RSI--</idno>
          <idno type="ROR">https://ror.org/02vnf0c38</idno>
          <orgName>Laboratoire Lorrain de Recherche en Informatique et ses Applications</orgName>
          <orgName type="acronym">LORIA</orgName>
          <date type="start">2012-01-01</date>
          <desc>
            <address>
              <addrLine>Campus Scientifique BP 239 54506 Vandoeuvre-lès-Nancy Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.loria.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-300009" type="direct"/>
            <relation active="#struct-411575" type="direct"/>
            <relation active="#struct-413289" type="direct"/>
            <relation name="UMR7503" active="#struct-441569" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-411575" status="VALID">
          <idno type="IdRef">184443237</idno>
          <idno type="ROR">https://ror.org/019tcpt25</idno>
          <orgName>CentraleSupélec</orgName>
          <desc>
            <address>
              <addrLine>3, rue Joliot Curie,Plateau de Moulon,91192 GIF-SUR-YVETTE Cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.centralesupelec.fr</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-413289" status="VALID">
          <idno type="IdRef">157040569</idno>
          <idno type="IdUnivLorraine">[UL]100--</idno>
          <idno type="ROR">https://ror.org/04vfs2w97</idno>
          <orgName>Université de Lorraine</orgName>
          <orgName type="acronym">UL</orgName>
          <date type="start">2012-01-01</date>
          <desc>
            <address>
              <addrLine>34 cours Léopold - CS 25233 - 54052 Nancy cedex</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-lorraine.fr/</ref>
          </desc>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-96532" status="VALID">
          <orgName>Centre de Recherche Public Henri Tudor [Headquarters]</orgName>
          <orgName type="acronym">CRP Henri Tudor</orgName>
          <desc>
            <address>
              <addrLine>29 Avenue John F. Kennedy, 1855 LUXEMBOURG</addrLine>
              <country key="LU"/>
            </address>
            <ref type="url">http://www.tudor.lu/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-371421" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-371421" status="VALID">
          <orgName>Centre de Recherche Public Henri-Tudor [Luxembourg]</orgName>
          <orgName type="acronym">CRP Henri-Tudor</orgName>
          <desc>
            <address>
              <addrLine>6 Avenue des Hauts-Fourneaux. 4362 Esch-sur-Alzette, Luxembourg</addrLine>
              <country key="LU"/>
            </address>
          </desc>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>