Data protection in cloud-based business processes
With the introduction of the General Data Protection Regulation (GDPR), the need for privacy-preserving cloud technologies has increased. The PREsTiGE research project, funded by the German Federal Ministry of Education & Research (BMBF), developed innovative methods and tools to safeguard privacy in the Collaborative Business Processes as a Service (BPaaS) business model. This model enables companies to carry out joint business processes efficiently and with cloud support.
In collaboration with industry partners and research institutions, including the Software & Information Engineering department, a solution was developed for the secure processing of sensitive data in the cloud.
Focus and technical implementation
Based on a detailed requirements analysis, key topics were identified and addressed:
- Privacy-preserving technologies for the cloud
- Secure business processes through encrypted data flows
- Monitoring and certification of cloud offerings
The Software & Information Engineering department supported the project partners with:
- Creation of a specification sheet to define the requirements
- Development of a demonstrator for practical implementation
- Development of a cloud cockpit for managing and monitoring data protection measures
Results and benefits
The prototype implementation and evaluation of BPaaS solutions enabled companies to securely access cloud services without jeopardizing their data protection requirements. The insights gained led to:
- Increased efficiency thanks to shorter processing times and lower costs
- Greater effectiveness through improved use of process knowledge
- Strengthening data security and implementing effective identity management
The Software & Information Engineering department also developed new methods for simple configuration, dynamic reconfiguration and monitoring of ongoing BPaaS processes. The research results were used for existing industrial processes and serve as a basis for future research projects.