The convergence of Internet of Things (IoT) and Artificial Intelligence (AI) technologies has given rise to the Internet of Behaviors (IoB) paradigm. This emerging concept leverages advancements in IoT sensors, big data analytics, and AI to gather, analyze, and interpret human behavioral data. This review aims to provide a taxonomy and analysis of the current state and trajectory of IoB. We categorize IoB approaches into online and physical variants, analyzing their key characteristics, data sources, privacy considerations, and monitoring capabilities. Through a structured literature survey, we explore the applications and research challenges through several domains such as healthcare, marketing, transportation, and manufacturing. The comparative analysis conducted in this study ofers insights into the complementary strengths and limitations of online and physical IoB, providing a clear definition of these concepts and a taxonomy of their key characteristics. Based on these definitions, this study investigates their applications across diverse sectors and identifies critical criteria (data sources, privacy concerns, ethical considerations, and implementation challenges) to provide a synthetic overview of their contribution to IoB development.

In recent years, there has been a significant increase in the volume of data and the number of datasets in the healthcare industry, and this trend is expected to continue and intensify. Various strategies are being developed to analyse the data. Nevertheless, these strategies are extensively segregated according to the specific data formats and disorders. Privacy-preserving Hybrid Learning Framework for Healthcare. The framework introduces an hybrid learning technique in order to achieve efficient decision-making. To tackle the challenge of interoperability and heterogeneity with multiple data sources, we propose to integrate a data meshing approach. Furthermore, this paper identifies the potential privacy challenges for machine learning-based healthcare applications that operate with multiple data sources and demand the excessive computation of cloud computing. In addition, we present a comprehensive use case for forecasting cardiovascular disease. The detailed use case and scenarios highlight how our proposal can improve the decision-making process.

With Cloud/Fog Computing being a paradigm combination of IoT context and Edge Computing extended with Cloud/Fog, business process in it involves dataflows among multi-layers and multi-nodes, possibly provided by multi-organizations. Achieving end-to-end trustworthiness over the whole dataflow in such a Cloud/Fog Computing context is a challenging issue, nonetheless a necessary pre-condition for a successful business process on intra-/inter- organizational level. This paper investigates technical conundrums related to this target and proposes a policy-based approach for trustworthiness governance. An architectural layout is proposed with according modules, by carrying out two methodologies. One resides in tracing data derivation and maintaining security-level over the whole dataflow, handling data aggregation with several protocols. The other is to express data owner trustworthiness requirements with an enhanced attribute-based access control policy model and to evaluate data accessing nodes’ trustworthiness-related properties. Experiments show that processing time per attribute pair drops as the scales of policies increase, suggesting good scaling property of the system.

International audience

The purpose of this paper is to define a generic methodology for semi automatic development of cloud-based business applications. This can be used by non-IT experts, such as business stakeholders, who trigger a business application development by simply stating its requirements in terms of business functionalities and constraints, QoS parameters, and her/his preferences. From these functionalities and constraints, Linked USDL requirements files are automatically generated. These files provide the basis for the cloud service discovery and launch the automatic development of cloud business applications. We present the first developments of our prototype.

Most approaches for Web service compositions focus on the technical level as they specify "how-to" achieve the composition instead of providing casual users with means to express "what-to" achieve their business objectives. This new mindset requires extending Web services with the concept of capability, which describes what a service can do to reduce the gap between Web services and business processes. In this paper, we propose a three-layer Web service capability model to capture objectives, to specify actions that achieve objectives, and establish links between capabilities. Based on this model, the capability matching process does not only discover Web services from high level requirements expressed by Semantics of Business Vocabulary and Business Rules (SBVR), but it also derives constraints on Web services.

Mimicking biological ecosystems, digital ecosystems refer to complex and interdependent systems and their underlying infrastructures by which all constituents interact and exhibit as a whole self-organizing, scalable and sustainable behaviors. This emerging topic is of great interest to scholars. Nevertheless, we observe a divergence of opinions and a disagreement about what Digital Ecosystems are, how they are designed, and what their applications should be. In this paper, we present an overall view of the concept of Digital Ecosystem and provide background for a common understanding. Firstly, we identify four factors that have lead to the emergence of Digital Ecosystems and present their definitions, characteristics and categories. Secondly, we discuss models and simulation tools to show current achievements and limitations. Finally, we illustrate the main challenges and shed light on further work in the field of Digital Ecosystems.

In response to increasing economical constraints, enterprise organization has evolved toward new structures such as networked enterprise, supply chains, virtual enterprise, or collaborative business organizations. This structural organization requires the interoperability of business processes (BPs)and information systems. Dealing with interoperability often leads to the deployment of Service-Oriented Architecture (SOA) based on Enterprise Service Bus (ESB) to design agile collaborative BPs and publish and compose new services. In order to protect each partner's own interests, security strategies must be developed and integrated in the service environment. Unfortunately, traditional security approaches deal with security concerns from a technical perspective (i.e., data transmission or authentication, etc.) and do not support end-to-end security in a distributed environment of business services and collaborative processes. In this paper, we attempt to improve end-to-end security by annotating service descriptions with security objectives used to generate convenient quality of protection (QoP) agreements between partners. Conversely, agreements are processed by a dedicated matching module with respect to security requirements and preferences to select business services, and then, compose their appropriate technical security services.

The development of web 2.0 increases the call for agile and simple Business process support. SOA (Service oriented Architecture) provides companies with a new model to build their IT applications around their business processes and combine them dynamically and flexibly with the services of partner companies. In this open and distributed context, it is required to implement an appropriate security at each service. So, during the composition of service, it will be good for user to specify the security preference to associate to each service. In this article we describe in a first step, the difficulty of using analytical risk methods such as EBIOS, Mehari and OCTAVE to specify the constraints of security to associate with services. Then we present the SOA and its security component, therefore start the service bus ESB will act as an intermediary between the client and service provider. In a second step, we develop our method that can lead to the specification of security and describe how it would be possible to specify these security constraints during the service composition.

End-to-end security in collaborative system has two inferences: the secure delivery of service and the `due usage' of it. The fulfillment of this requirement involves re-thinking the security policy model of collaborative systems. This paper analyses the factors that impact security in such systems. Based on this, a general architecture is proposed with a collaboration-based policy model specified for managing end-to-end security. An ontology base is introduced to enable different concept levels in policy expression and facilitate interoperability.

Current work on service systems is flourishing. Both researchers and practitioners seek to build service systems to create innovative services and increase productivity in the service sector. Unfortunately, most of the existing work focuses on information systems and their lack of models that not only represent entities in service systems with formal methods, but also illustrate a mechanism to achieve innovative services. In this paper, we firstly propose a general service system framework listing static components used in service production and discussing relationships between them. We then introduce a service model to represent pivotal components in service systems and also discuss how to innovate. Since competencies are important components in service systems, we define an ontological description of required competencies to carry out innovative services. We finally present a simple case study to further explain our formal model.

Service ecosystems provide distributed evolutionary capabilities allowing services to recombine and evolve in sustainable environments. Web services play a crucial role in service ecosystems since they support interoperable machine-to-machine interactions and help in developing new services from existing services by using a variety of composition languages. Business Process Execution Language (BPEL) has recently emerged as the de-facto standard for Web service composition. From the security perspective, Web service providers may require different authentication mechanisms to securely invoke their services. The integration of different authentication mechanisms complicates the global authentication scheme of BPEL-based processes and raises a challenge in adopting BPEL in service ecosystems. In this work, we propose the Security Service concept to define activity single sign-on (ASSO) for federated identify-based authentication. The Security Service allows the integration of heterogeneous authentication mechanisms in the context of multiple service providers. We also extend the activity to ensure non-intrusive extension of BPEL language and implement the Security Service in a peer-to-peer network.

Service systems are highly complex and often difficult to study, design and implement given their socio-technical-organisational nature. This complexity leads to a poor understanding as to how service systems can be innovative and competitive. Within the service sector, Knowledge-Intensive Service firms compete by the skills and knowledge of their employees to deliver online business services. However, current service systems for Knowledge-Intensive Service firms are either too static to describe the dynamic mechanism, or too visionary to use in real world applications, which makes activities such as designing, developing, and evolving adaptive service applications unpractical. In this paper, we present a generic service system architecture describing service characteristics with descriptors such as customer-centric, knowledge-driven, reusability, safeguards, interoperability, and Internet delivery channels. Finally, we propose an implementation framework to achieve secure and adaptive service delivery and a service life cycle describing the service production process.

Over the last ten years, enterprises focus their efforts on improving collaboration prospective with their partners, resulting in collaborative business organization. Making a heavy use of ICT and service oriented technologies these strategies are first developed at the business level and need to be extended to the industrial level. Building an "Industrial Service" environment involves adapting the service infrastructure to fit the real-time and multi-task requirements. To support industrial services composition and orchestration, we propose a mobile-agent based infrastructure able to carry out security and quality of service constraints.

Enterprises are evolving towards a more agile, dynamic and adaptive organisation that can make quick responses to the market and customer requirements. This carried out an increasing need for enterprises to get involved in collaboration strategies. Moreover, new IT organisation, namely Service Oriented Architectures (SOA), can be introduced to implement opened and agile information system. To align the enterprise strategy and the information support system organisation, we present a cooperation model based on SOA, called service oriented enterprise. Thanks to a multi-level process organisation, simple combination and filtering rules can be applied to build dynamically customised distributed processes on demand. These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.

New organizational trends as alliances, virtual enterprises or extended enterprises make an heavy use of the information and communication technologies. This involves the integration of different views of the enterprises own information systems. In addition to EDI or groupware projects own problems, a global policy of the shared data management must be defined. For this purpose, we propose a multiauthoring approach that can ensure the global consistency. As a multi-organization is set, security constraints arise and can idle the alliance dynamic. To solve this point, we propose to couple the information system design with a security policy. Then, these organizational choices are translated to dedicated distributed architectures.