Secure Web service-based resource sharing in ERP Networks

Nico Brehm and Jorge Marx Gómez

Journal of Information Privacy and Security, 2005, vol. 1, issue 2, 29-48

Abstract: Enterprise Resource Planning (ERP) systems integrate operational application systems of different enterprise sectors. Logistics, human resource management and business accountancy are the most important components, the business Junctions of ERP systems can be assigned to. Besides the advantages of an integrated solution a number of disadvantages arise from the complexity of such systems. Particularly small- and medium-sized enterprises (SME) are affected by typical disadvantages like high operating- and maintenance costs which means that they cannot afford to buy and maintain an enterprise-wide integrated ERP system. A feasible opportunity to counter these problems is to develop a distributed (federated) system architecture based on loosely coupled components and their functions in order to partly reduce the complexity of the super-ordinate system. The presented paper describes the distribution of ERP systems on the basis of Web Services and gives a first proposal of a prototype. ERP system functions are distributed within a peer-to-peer architecture and are managed by different network nodes (providers). The major risks of this approach are connected to security problems which appear when confidential enterprise data is handled. A continuously automated function (service) integration from service discovery until service response processing increases the already existing risks. An important issue in this context is the consideration of trust relationships between service consumers and service providers. In our proposed solution security configurations based on XML policies are used to meet the security requirements of both communication partners in an open network.

Date: 2005
References: Add references at CitEc
Citations:

Downloads: (external link)
http://hdl.handle.net/10.1080/15536548.2005.10855766 (text/html)
Access to full text is restricted to subscribers.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:taf:uipsxx:v:1:y:2005:i:2:p:29-48

Ordering information: This journal article can be ordered from
http://www.tandfonline.com/pricing/journal/uips20

DOI: 10.1080/15536548.2005.10855766

Access Statistics for this article

Journal of Information Privacy and Security is currently edited by Chuleeporn Changchit

More articles in Journal of Information Privacy and Security from Taylor & Francis Journals
Bibliographic data for series maintained by Chris Longhurst ().