Issues in document security enforcement for activity execution in CapBasED-AMS

The CapBasED-AMS (Capability-based and Event-driven Activity Management System) deals with the management and execution of activities. A Problem Solving Agent (PSA) is a human, or a hardware system, or a software system having an ability to execute activities. An activity consists of multiple interdependent tasks that need to be coordinated, scheduled and executed by a set of PSAs. A task usually involves some processing of documents in execution time, especially when executing document intensive task. Since many of the documents have sensitive information, document security issues have to be modeled, enforced, and managed by the activity management system. In this paper, we discuss three important issues for research in document security: least privilege, dynamic authorization of document access and deduction of document privilege information from event observation