Dynamic Role Binding in Blockchain-Based Collaborative Business Processes

  • Orlenys López-PintadoEmail author
  • Marlon Dumas
  • Luciano García-Bañuelos
  • Ingo Weber
Conference paper
Part of the Lecture Notes in Computer Science book series (LNCS, volume 11483)


Blockchain technology enables the execution of collaborative business processes involving mutually untrusted parties. Existing tools allow such processes to be modeled using high-level notations and compiled into smart contracts that can be deployed on blockchain platforms. However, these tools brush aside the question of who is allowed to execute which tasks in the process, either by deferring the question altogether or by adopting a static approach where all actors are bound to roles upon process instantiation. Yet, a key advantage of blockchains is their ability to support dynamic sets of actors. This paper presents a model for dynamic binding of actors to roles in collaborative processes and an associated binding policy specification language. The proposed language is endowed with a Petri net semantics, thus enabling policy consistency verification. The paper also outlines an approach to compile policy specifications into smart contracts for enforcement. An experimental evaluation shows that the cost of policy enforcement increases linearly with the number of roles and constraints.



This work was funded by the Estonian Research Council (grant IUT20-55) and the European Regional Development Fund (Dora Plus, contract 36.9-6.1/459).


  1. 1.
    Andrews, T., et al.: BPEL4WS, Business Process Execution Language for Web Services Version 1.1. IBM (2003)Google Scholar
  2. 2.
    Bussard, L., Nano, A., Pinsdorf, U.: Delegation of access rights in multi-domain service compositions. Identity Inf. Soc. 2(2), 137–154 (2009)CrossRefGoogle Scholar
  3. 3.
    Decker, G., Kopp, O., Leymann, F., Weske, M.: BPEL4Chor: extending BPEL for modeling choreographies. IEEE ICWS 2007, 296–303 (2007)Google Scholar
  4. 4.
    Frantz, C., Nowostawski, M.: From institutions to code: towards automated generation of smart contracts. In: IEEE FAS*W 2016, pp. 210–215 (2016)Google Scholar
  5. 5.
    Kloppmann, M., et al.: WS-BPEL extension for people - BPEL4People. Joint white paper, IBM and SAP (2005)Google Scholar
  6. 6.
    López-Pintado, O., García-Bañuelos, L., Dumas, M., Weber, I., Ponomarev, A.: CATERPILLAR: a business process execution engine on the ethereum blockchain. CoRR abs/1808.03517 (2018)Google Scholar
  7. 7.
    Mendling, J., et al.: Blockchains for business process management - challenges and opportunities. ACM Trans. Manag. Inf. Syst. 9(1), 4:1–4:16 (2018)CrossRefGoogle Scholar
  8. 8.
    Murata, T.: Petri nets: properties, analysis and applications. Proc. IEEE 77(4), 541–580 (1989)CrossRefGoogle Scholar
  9. 9.
    Pautasso, C., Alonso, G.: Flexible binding for reusable composition of web services. In: Software Composition, pp. 151–166 (2005)CrossRefGoogle Scholar
  10. 10.
    Prybila, C., Schulte, S., Hochreiner, C., Weber, I.: Runtime verification for business processes utilizing the Bitcoin blockchain. Futur. Gener. Comput. Syst. 46, 36–50 (2017)Google Scholar
  11. 11.
    Robinson, P., Kerschbaum, F., Schaad, A.: From business process choreography to authorization policies. In: Data and Applications Security, pp. 297–309 (2006)CrossRefGoogle Scholar
  12. 12.
    Russell, N., van der Aalst, W.M.P., ter Hofstede, A.H.M., Edmond, D.: Workflow resource patterns: identification, representation and tool support. In: CAiSE (2005)Google Scholar
  13. 13.
    Tran, A., Lu, Q., Weber, I.: Lorikeet: a model-driven engineering tool for blockchain-based business process execution and asset management. Demo Track at BPM 2018, 56–60 (2018)Google Scholar
  14. 14.
    Wainer, J., Kumar, A., Barthelmess, P.: DW-RBAC: a formal security model of delegation and revocation in workflow systems. Inf. Syst. 32(3), 365–384 (2007)CrossRefGoogle Scholar
  15. 15.
    Xu, X., Weber, I., Staples, M.: Architecture for Blockchain Applications. Springer, Heidelberg (2019). Scholar

Copyright information

© Springer Nature Switzerland AG 2019

Authors and Affiliations

  • Orlenys López-Pintado
    • 1
    Email author
  • Marlon Dumas
    • 1
  • Luciano García-Bañuelos
    • 1
    • 2
  • Ingo Weber
    • 3
  1. 1.University of TartuTartuEstonia
  2. 2.Tecnológico de MonterreyMonterreyMexico
  3. 3.Data61, CSIROSydneyAustralia

Personalised recommendations