In distributed application systems for companies, it is necessary to control which data can be accessed and transmitted by which people and via which channels. This is necessary to protect company secrets and fulfil data protection requirements.

Particularly in the context of web service-based applications, it is necessary to take the corresponding security guidelines into account during development. Because the web service composition is based on the business processes to be supported, it makes sense to store the necessary information directly in the business process model. We therefore propose security enhancements to event-driven process chains (EPCs), which can be used to model business processes.

If you are interested, please contact or .