论文信息 - A Delegation Framework for Access Control in WfMS Based on Tasks and Roles

A Delegation Framework for Access Control in WfMS Based on Tasks and Roles

Access control is important for protecting the information integrities in WfMS's. Compared to conventional access control models such as discretionary, mandatory, and role-based access control models, an access-control model based on both tasks and roles meets more requirements for modern enterprise environments. However, there are no discussions on delegation mechanisms for such a model. In this paper, we propose a new delegation framework to support the access control associated with the model. Among various delegations, two typical cases and their solution algorithms are presented to indicate the usability of the framework.

Feng-Jian Wang | Hwai-Jung Hsu | Pu Jian

[1] He Wang,et al. Delegation in the role graph model , 2006, SACMAT '06.

[2] Jan H. P. Eloff,et al. Separation of duties for access control enforcement in workflow environments , 2001, IBM Syst. J..

[3] Elisa Bertino,et al. Fine-grained role-based delegation in presence of the hybrid role hierarchy , 2006, SACMAT '06.

[4] Akhil Kumar,et al. A fine-grained, controllable, user-to-user delegation method in RBAC , 2005, SACMAT '05.

[5] Ravi S. Sandhu,et al. Role-based delegation model/hierarchical roles (RBDM1) , 2004, 20th Annual Computer Security Applications Conference.

[6] Seog Park,et al. Task-role-based access control model , 2003, Inf. Syst..

[7] van der Wmp Wil Aalst,et al. Workflow resource patterns , 2004 .

[8] Ravi Sandhu,et al. A Role-Based Delegation Model and Some Extensions , 2000 .

[9] Mary Ellen Zurko,et al. Separation of duty in role-based environments , 1997, Proceedings 10th Computer Security Foundations Workshop.

[11] Ravi S. Sandhu,et al. Role-Based Access Control Models , 1996, Computer.

[12] Sylvia L. Osborn,et al. The role graph model and conflict of interest , 1999, TSEC.