A Knowledge-based Security Policy Framework for Business Process Management

Business process management (BPM) is often a key component of the business change. Business rules, whether embedded within BPM or on their own, have begun playing an ever-increasing role of prominence in process-centric business and system strategies. Service-oriented architecture (SOA) is used to support the business processes and a novel approach to share service knowledge and application- specific information is needed. In this paper, we model web service policy with corporate knowledge, which is defined as the amount of knowledge provided by individual agents. The proposal builds upon the project AKT´s work in defining a semantic Web constraint interchange format (CIF), which itself builds on the proposed semantic Web rule language (SWRL). The main contribution include also a new ontology for representing security constraints as policy and a knowledge management method to our proposed knowledge-based policy framework; we also show the possibility to integrate the business rules into policy specification by means of converting them into constraint satisfaction problem (CSP) using CIF.