A Task-Attribute-Based Workflow Access Control Model

Access control is one of the security issues of the workflow system. Because of the task-role-based access control policy in the deficiencies of system's security, versatility and flexibility, we propose a task-attribute-based access control model (T-ABAC). This paper researches on the model's structure and the basic principle, proposes its framework, and describes the process of the framework. The model combines the advantage of the task-based access control model and the attribute-based access control model. Its description is more precise, its security is better, and its application is more flexible.