1. ¹Dept. Tecnologías y Sistemas de Información, Univ. Castilla-La Mancha, Ciudad Real, Spain
2. ²Dept. Lenguajes y Sistemas Informáticos, Universidad de Alicante, Alicante, Spain

Correspondence: Eduardo Fernández-Medina, Dept. Tecnologías y Sistemas de Información, Universidad de Castilla-La Mancha, Paseo de la Universidad, 4, Ciudad Real 13071, Spain. Tel: +34 926 295300 ext. 3744; Fax: +34 926 295354; E-mail: eduardo.fdezmedina@uclm.es

Received 27 October 2006; Revised 31 May 2007; Accepted 27 July 2007.

Abstract

Data Warehouses (DW), Multidimensional (MD) databases, and On-Line Analytical Processing (OLAP) applications provide companies with many years of historical information for the decision-making process. Owing to the relevant information managed by these systems, they should provide strong security and confidentiality measures from the early stages of a DW project in the MD modeling and enforce them. In the last years, there have been some proposals to accomplish the MD modeling at the conceptual level. Nevertheless, none of them considers security measures as an important element in their models, and therefore, they do not allow us to specify confidentiality constraints to be enforced by the applications that will use these MD models. In this paper, we present an Access Control and Audit (ACA) model for the conceptual MD modeling. Then, we extend the Unified Modeling Language (UML) with this ACA model, representing the security information (gathered in the ACA model) in the conceptual MD modeling, thereby allowing us to obtain secure MD models. Moreover, we use the OSCL (Object Security Constraint Language) to specify our ACA model constraints, avoiding in this way an arbitrary use of them. Furthermore, we align our approach with the Model-Driven Architecture, the Model-Driven Security and the Model-Driven Data Warehouse, offering a proposal highly compatible with the more recent technologies.