Analyzing Semantics of Documents by Using a Program Analysis Method

Because documents play a central role in real business workflow, analysis of their semantics leads to role analysis in an organization. In this paper, we give semantics of documents by using DTL (document tree logic), which is similar to computational tree logic in program analysis. By using documents and giving semantics in DTL, we can embed results of business workflow in which the sequences of events such as requests and approvals are essential as a business process. The order of approvals is represented by digital signatures, and thus a digital document can be regarded as a model of predefined business semantics based on roles and approvals. We show that access control is enriched by using documents representing workflow. Authorization is done as validating a DTL formula associated with a document. A document is considered to carry a model of DTL that can embed business processes. Therefore, a user can claim the userpsilas authority by submitting an appropriate digitally signed document.