An integrated trusted processes framework for consumer-facing B2B networks

Abstract

With the advent of the Internet, co-operating enterprises are increasingly sharing consumer data to deliver them information-rich online experiences with value-added services. At the same time, technological advances in web services standards based on a Service Oriented Architecture (SOA) design have enabled heterogeneous Business-to-Business (B2B) integration between enterprises. End-to-End business processes that span across multiple enterprises can be developed using the Business Process Execution Language (BPEL). However, such processes must address issues that normally do not arise for processes within a single enterprise. A framework is needed which supports a SOA-enabled business process management approach but also has technical infrastructure to address issues related to identity, privacy, compliance, monitoring and people interaction. In our thesis, we accomplish this using a framework that supports the design, implementation and management of trusted B2B processes defined using the BPEL standard and deployed into Circle of Trust architecture as specified by the Liberty Alliance federated identity standards. A key contribution of our thesis was to extend the Circle of Trust architecture with a new entity that introduces components to help businesses manage their B2B processes. Two use-case scenarios involving information-rich B2B processes were implemented to evaluate our framework.