公开(公告)号：US20170300701A1

公开(公告)日：2017-10-19

申请号：US15097304

申请日：2016-04-13

Applicant: SAP SE

Inventor： SERENA PONTA ,  Luca Compagna ,  Daniel Dos Santos ,  Silvio Ranise

IPC: G06F21/62 ,  G06Q40/02 ,  G06Q10/06

CPC classification number: G06F21/6218 ,  G06F21/54 ,  G06Q10/06 ,  G06Q40/025

Abstract: At design time, a process designer may generate a workflow model of a process associated with in-memory database. The workflow model include tasks and authorization constraints. The authorization constraints are task based constraints, associated with the workflow model. The workflow model is translated into transition system format to generate a reachability graph including possible workflow execution paths. The reachability graph may be translated in a database query format to generate a monitor. At runtime, when a request is received from a process participant to execute a specific task in the workflow model, the monitor is able to enforce authorization constraints and authorization policies received at the runtime, and ensure secure and compliant execution of processes.