Workflow-aware security of integrated mobility services

Abstract

The Connected Mobility Lab (CML) is a mobility solution created in collaboration between Siemens and BMW. The CML provides a multi-tenant cloud infrastructure where entities – mobility providers, financial service providers, users – might know each other or might be complete strangers. The CML encapsulates core services from different stakeholders and exposes an integrated, comprehensive, and innovative mobility service to its users. The different owners may have different security goals and impose their own rules and workflows on entities interacting with their services. Thus, there is a need to negotiate in order to reach mutually acceptable compromises, and inter-operate services within the CML. Especially, when different services collaborate to fulfill a purpose it is important to allow only authorized entities to execute the required tasks. To enforce such tasks to be executed in a particular order we need a workflow specification and enforcement method. This paper presents a workflow specification and enforcement framework that guarantees the process integrity (for instance, a technical process) by enforcing an access control method that restricts the entities to do only what is allowed in the specified workflow. The framework also supports dynamic workflows that adapt to error conditions, and a method to support accountability. We evaluate our proposed framework on a CML business mobility use case. We extend the Petri Nets based workflow specification and enforcement framework proposed in [2] to achieve our goals.