We consider the problem of enforcing corporate governance control relying on cloud-based services. Extending previous work, we focus in particular on the support of delegation of the director privileges, enabling their dynamic and temporary assignment to a vice-director. Like previous work, our control relies on encrypted tags, which are here extended addressing the challenges introduced by dynamic delegation which operates on a time dimension orthogonal to the corporate governance control process. Our solution enables delegation while ensuring a vice-director to enjoy the director privileges only when delegation is active and not to operate as director for operations the vice-director has processed as employee (separation of duties). Our tag construction ensures integrity of the dynamic delegation control and protection against tag tampering.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Supporting Delegation in Outsourced ICA Process

  • Sabrina De Capitani di Vimercati,
  • Sara Foresti,
  • Stefano Paraboschi,
  • Sara Petrilli,
  • Pierangela Samarati

摘要

We consider the problem of enforcing corporate governance control relying on cloud-based services. Extending previous work, we focus in particular on the support of delegation of the director privileges, enabling their dynamic and temporary assignment to a vice-director. Like previous work, our control relies on encrypted tags, which are here extended addressing the challenges introduced by dynamic delegation which operates on a time dimension orthogonal to the corporate governance control process. Our solution enables delegation while ensuring a vice-director to enjoy the director privileges only when delegation is active and not to operate as director for operations the vice-director has processed as employee (separation of duties). Our tag construction ensures integrity of the dynamic delegation control and protection against tag tampering.