Delegation constraint management

The paper addresses the issue of providing access control via delegation and constraint management across multiple security domains. Specifically, this paper proposes a novel Delegation Constraint Management model to manage and enforce delegation constraints across security domains. An algorithm to trace the authority of delegation constraints is introduced as well as an algorithm to form a delegation constraint set and detect/prevent potential conflicts. The algorithms and the management model are built upon a set of formal definitions of delegation constraints. In addition, a constraint profile based on XACML is proposed as a means to express the delegation constraint. The paper also includes a protocol to exchange delegation constraints (in the form of user commitments) between the involved entities in the delegation process.

A model for constraint and delegation management

This paper introduces a model to facilitate delegation, including ad-hoc delegation, in cross security domain activities. Specifically, this paper proposes a novel delegation constraint management model to manage and track delegation constraints across security domains. An algorithm to trace the authority of delegation constraints is introduced as well as an algorithm to form a delegation constraint set and detect/prevent potential conflicts. The algorithms and the management model are built upon a set of formal definitions of delegation constraints.

Delegation framework for federated systems

It is not uncommon for enterprises today to be faced with the demand to integrate and incor- porate many different and possibly heterogeneous systems which are generally independently designed and developed, to allow seamless access. In effect, the integration of these systems results in one large whole system that must be able, at the same time, to maintain the local autonomy and to continue working as an independent entity. This problem has introduced a new distributed architecture called federated systems. The most challenging issue in federated systems is to find answers for the question of how to efficiently cooperate while preserving their autonomous characteristic, especially the security autonomy. This thesis intends to address this issue. The thesis reviews the evolution of the concept of federated systems and discusses the organisational characteristics as well as remaining security issues with the existing approaches. The thesis examines how delegation can be used as means to achieve better security, especially authorisation while maintaining autonomy for the participating member of the federation. A delegation taxonomy is proposed as one of the main contributions. The major contribution of this thesis is to study and design a mechanism to support dele- gation within and between multiple security domains with constraint management capability. A novel delegation framework is proposed including two modules: Delegation Constraint Man- agement module and Policy Management module. The first module is designed to effectively create, track and manage delegation constraints, especially for delegation processes which require re-delegation (indirect delegation). The first module employs two algorithms to trace the root authority of a delegation constraint chain and to prevent the potential conflict when creating a delegation constraint chain if necessary. The first module is designed for conflict prevention not conflict resolution. The second module is designed to support the first module via the policy comparison capability. The major function of this module is to provide the delegation framework the capability to compare policies and constraints (written under the format of a policy). The module is an extension of Lin et al.'s work on policy filtering and policy analysis. Throughout the thesis, some case studies are used as examples to illustrate the discussed concepts. These two modules are designed to capture one of the most important aspects of the delegation process: the relationships between the delegation transactions and the involved constraints, which are not very well addressed by the existing approaches. This contribution is significant because the relationships provide information to keep track and en- force the involved delegation constraints and, therefore, play a vital role in maintaining and enforcing security for transactions across multiple security domains.

Aplicación de la Teoría de Restricciones en la gestión de la seguridad del paciente

La seguridad del paciente constituye una prioridad y un reto para los organismos Gubernamentales y para las instituciones de salud tanto a nivel nacional como internacional (Sescam, 2007), quienes han emprendido una búsqueda de soluciones por medio de diferentes metodologías y estrategias que permitan reducir al máximo los riesgos de la atención de salud para el paciente (Ministerio de Sanidad y Consumo, 2002). Aunque se cuenta con mejores sistemas o metodología de análisis y sistemas de notificación la persistencia del fenómeno es constante. ( Requena, Aranaz, Gea, Limón, Miralles, & Vitaller , 2010). En esta tesis se plantea una nueva alternativa de gestión en la seguridad del paciente a través de la Teoría de Restricciones (TOC) para emprender acciones que permitan analizar el sistema bajo esta nueva metodología, intervenir de manera oportuna, impactar y estimular al personal de salud a trabajar en la búsqueda del mejoramiento continuo para el establecimiento de un sistema efectivo de gestión de la seguridad del paciente y una cultura de seguridad de los trabajadores de la institución de salud.

Beyond MOF constraints : multiple constraint set metamodelling for lifecycle management

The management of models over time in many domains requires different constraints to apply to some parts of the model as it evolves. Using EMF and its meta-language Ecore, the development of model management code and tools usually relies on the meta- model having some constraints, such as attribute and reference cardinalities and changeability, set in the least constrained way that any model user will require. Stronger versions of these constraints can then be enforced in code, or by attaching additional constraint expressions, and their evaluations engines, to the generated model code. We propose a mechanism that allows for variations to the constraining meta-attributes of metamodels, to allow enforcement of different constraints at different lifecycle stages of a model. We then discuss the implementation choices within EMF to support the validation of a state-specific metamodel on model graphs when changing states, as well as the enforcement of state-specific constraints when executing model change operations.

Modeling resource management in the building design process by information constraint Petri nets

The effect of resource management on the building design process directly influences the development cycle time and success of construction projects. This paper presents the information constraint net (ICN) to represent the complex information constraint relations among design activities involved in the building design process. An algorithm is developed to transform the information constraints throughout the ICN into a Petri net model. A resource management model is developed using the ICN to simulate and optimize resource allocation in the design process. An example is provided to justify the proposed model through a simulation analysis of the CPN Tools platform in the detailed structural design. The result demonstrates that the proposed approach can obtain the resource management and optimization needed for shortening the development cycle and optimal allocation of resources.

Introduction of soft budget constraint as an analyzing tool into public management. The case of the Hungarian public administration reform

Public management reforms are usually underpinned by arguments that they will make the public administration system more effective and efficient. In practice, however, it is very hard to determine whether a given reform will improve the efficiency and effectiveness of the public administration system in the long run. Here, I shall examine how the concept of the soft budget constraint (SBC) introduced by János Kornai (Kornai 1979, 1986; Kornai, Maskin & Roland 2003) can be applied to this problem. In the following, I shall describe the Hungarian public administration reforms implemented by the Orbán government from 2010 onward and analyze its reforms, focusing on which measures harden and which ones soften the budget constraint of the actors of the Hungarian public administration system. In the literature of economics, there is some evidence-based knowledge on how to harden/soften the budget constraint, which improves/reduces the effectiveness and hence the efficiency of the given system. By using the concept of SBC, I also hope to shed some light on the rationale behind the Hungarian government’s introduction of such a contradictory reform package. Previously, the concept of SBC was utilized narrowly in public management studies, mostly in the field of fiscal federalism. My goal is to apply the concept to a broader area of public management studies. My conclusion is that the concept of SBC can significantly contribute to public management studies by deepening our knowledge on the reasons behind the success and failure of public administration reforms.

Constraint-Informed Information Systems in Space Management Utilization

Declarative techniques such as Constraint Programming can be very effective in modeling and assisting management decisions. We present a method for managing university classrooms which extends the previous design of a Constraint-Informed Information System to generate the timetables while dealing with spatial resource optimization issues. We seek to maximize space utilization along two dimensions: classroom use and occupancy rates. While we want to maximize the room use rate, we still need to satisfy the soft constraints which model students’ and lecturers’ preferences. We present a constraint logic programming-based local search method which relies on an evaluation function that combines room utilization and timetable soft preferences. Based on this, we developed a tool which we applied to the improvement of classroom allocation in a University. Comparing the results to the current timetables obtained without optimizing space utilization, the initial versions of our tool manages to reach a 30% improvement in space utilization, while preserving the quality of the timetable, both for students and lecturers.

Developing creativity and innovation in management education : an artful event for transformative learning

This paper argues that management education needs to consider a trend in learning design which advances more creative learning through an alliance with art-based pedagogical processes. A shift is required from skills training to facilitating transformational learning through experiences that expand human potential, facilitated by artistic processes. In this paper the authors discuss the necessity for creativity and innovation in the workplace and the need to develop better leaders and managers. The inclusion of arts-based processes enhances artful behaviour, aesthetics and creativity within management and organisational behaviour, generating important implications for business innovation. This creative learning focus stems from an analysis of an arts-based intervention for management development. Entitled Management Jazz the program was conducted over three years at a large Australian University. The paper reviews some of the salient literature in the field. It considers four stages of the learning process: capacity, artful event, increased capability, and application/action to produce product. One illustrative example of an arts-based learning process is provided from the Management Jazz program. Research findings indicate that artful learning opportunities enhance capacity for awareness of creativity in one’s self and in others. This capacity correlates positively with a perception that engaging in artful learning enhances the capability of managers in changing collaborative relationships and habitat constraint. The authors conclude that it is through engagement and creative alliance with the arts that management education can explore and discover artful approaches to building creativity and innovation. The illustration presented in this paper will be delivered as a brief workshop at the Fourth Art of Management Conference. The process of bricolage and articles at hand will be used to explore creative constraints and prototypes while generating group collaboration. The mini-workshop will conclude with discussion of the arts-based process and capability enhancement outcomes.

M-ary trees for combinatorial asset management decision problems

A novel m-ary tree based approach is presented to solve asset management decisions which are combinatorial in nature. The approach introduces a new dynamic constraint based control mechanism which is capable of excluding infeasible solutions from the solution space. The approach also provides a solution to the challenges with ordering of assets decisions.

A biomechanical analysis of growing rods used in the management of early onset scoliosis

INTRODUCTION Managing spinal deformities in young children is challenging, particularly early onset scoliosis (EOS). Surgical intervention is often required if EOS has been unresponsive to conservative treatment particularly with rapidly progressive curves. An emerging treatment option for EOS is fusionless scoliosis surgery. Similar to bracing, this surgical option potentially harnesses growth, motion and function of the spine along with correcting spinal deformity. Dual growing rods are one such fusionless treatment, which aims to modulate growth of the vertebrae. The aim of this study was to ascertain the extent to which semiconstrained growing rods (Medtronic, Sofamor, Danek, Memphis, TN) with a telescopic sleeve component, reduce rotational constraint on the spine compared with standard "constrained / rigid" rods and hence potentially provide a more physiological mechanical environment for the growing spine. METHODS Six 40-60kg English Large White porcine spines served as a model for the paediatric human spine. Each spine was dissected into a 7 level thoracolumbar multi-segment unit (MSU), removing all non-ligamentous soft tissues and leaving 3cm of ribs either side. Pure nondestructive axial rotation moments of ±4Nm at a constant rotation rate of 8deg.s-1 were applied to the mounted MSU spines using a biaxial Instron testing machine. Displacement of each vertebral level was captured using a 3D motion tracking system (Optotrak 3020, Northern Digital Inc, Waterloo, ON). Each spine was tested in an un-instrumented state first and then with appropriately sized semi-constrained growing rods and rigid rods in alternating sequence. The rods were secured by multi-axial pedicle screws (Medtronic CD Horizon) at levels 2 and 6 of the construct. The range of motion (ROM), neutral zone (NZ) size and stiffness (Nm.deg-1) were calculated from the Instron load-displacement data and intervertebral ROM was calculated through a MATLAB algorithm from Optotrak data. RESULTS Irrespective of the order of testing, rigid rods significantly reduced the total ROM compared with semi-constrained rods (p<0.05) with in a significantly stiffer spine for both left and right axial rotation (p<0.05). Analysing the intervertebral motion within the instrumented levels 2-6, rigid rods showed reduced ROM compared with semi-constrained growing rods and compared with un-instrumented motion segments. CONCLUSION Semi-constrained growing rods maintain similar stiffness in axial rotation to un-instrumented spines, while dual rigid rods significantly reduce axial rotation. Clinically the effect of semi-constrained growing rods as observed in this study is that they would be expected to allow growth via the telescopic rod components while maintaining the axial flexibility of the spine, which may reduce occurrence of the crankshaft phenomenon.

A biomechanical analysis of growing rods used in the management of early onset scoliosis

INTRODUCTION Managing spinal deformities in young children is challenging, particularly early-onset scoliosis (EOS). Any progressive spinal deformity particularly in early life presents significant health risks for the child and a challenge for the treating surgeon. Surgical intervention is often required if EOS has been unresponsive to conservative treatment particularly with rapidly progressive curves. An emerging treatment option particularly for EOS is fusionless scoliosis surgery. Similar to bracing this surgical option potentially harnesses growth, motion and function of the spine along with correcting spinal deformity. Dual growing rods is one such fusionless treatment, which aims to modulate growth of the vertebrae. The aim of this study was to ascertain the extent to which semi-constrained growing rods (Medtronic, Memphis, TN) with a telescopic sleeve component, reduce rotational constraint on the spine compared with standard rigid rods and hence potentially provide a more physiological mechanical environment for the growing spine. METHODS Six 40-60kg English Large White porcine spines served as a model for the paediatric human spine. Each spine was dissected into 7 level thoracolumbar multi-segment unit (MSU) spines, removing all non-ligamentous soft tissues. Appropriately sized semi-constrained growing rods and rigid rods were secured by multi-axial screws (Medtronic) prior to testing in alternating sequences for each spine. Pure nondestructive moments of +/4Nm at a constant rotation rate of 8deg/s was applied to the mounted MSU spines. Displacement of each level was captured using an Optotrak (Northern Digital Inc, Waterloo, ON). The range of motion (ROM), neutral zone (NZ) size and stiffness (Nm/deg) were calculated from the Instron load-displacement data and intervertebral ROM was calculated through a MATLAB algorithm from Optotrak data. RESULTS Irrespective of sequence order rigid rods significantly reduced the total ROM (deg) than compared to semi-constrained rods (p<0.05) and resulted in a significantly stiffer (Nm/deg) spine for both left and right axial rotation testing (p<0.05). Analysing the intervertebral motion within the instrumented levels, rigid rods showed reduced ROM (Deg) than compared to semi-constrained growing rods and the un-instrumented (UN-IN) test sequences. CONCLUSION The semi-constrained growing rods maintained rotation similar to UN-IN spines while the rigid rods showed significantly reduced axial rotation across all instrumented levels. Clinically the effect of semi-constrained growing rods evaluated in this study is that they will allow growth via the telescopic rod components while maintaining the axial rotation ability of the spine, which may also reduce the occurrence of the crankshaft phenomenon.