A Transaction-Based Purpose-Oriented Access Control Model for Information Flow Management

Distributed applications are realized by cooperation of multiple objects. Each object is manipulated through a method supported by the object and then the method may further invoke methods of other objects. Purpose-oriented access rules indicate what methods in objects can invoke methods of other objects. Information flow among the objects occurs if the requests and responses of the methods carry data. The information flow depends on an invocation sequence of methods. We discuss how the invocation sequence of methods influences the information flow.