Enforcing the Chinese wall model for tenant conflict of interest in the service cloud. (1st January 2014)

• Record Type: Journal Article
• Authors: Alqahtani, Sarra; Gamble, Rose F.; Ray, Indrakshi
• Is Part Of: International journal of business process integration and management. Volume 7:Number 2(2014)
• Page Start: 166
• Page End: 177
• Publication Date: 2014-01-01
• Subjects: service cloud -- web service composition -- Chinese wall -- auditing -- monitoring -- conflict of interest; Business -- Computer networks -- Periodicals; Industrial management -- Periodicals; 658.054605
• Languages: English
• ISSNs: 1741-8763

Abstract

The service cloud provisions the services from different vendors into an application that can respond to tenant requests. Thus, the service cloud model must support provisioning services for the request without incurring a Conflict of Interest (COI) in their message exchange among vendors. Service vendors must disclose their COI classes for storage and analysis by the cloud because as services are provisioned to an application, additional conflict classes may be added, preventing the service from future compositions to avoid COI. In this paper, we present a strategy to centrally store and monitor COI classes for services using principles of the Chinese wall model. We introduce a Security Monitoring Database (SMDB) that encompasses the repositories and resources to audit the COI classes as they are assigned to hosted services. We describe an algorithm to prevent COI before provisioning services and dynamically detect it during runtime using the SMDB information.