Abstract:Business process describes a set of services that span enterprise boundaries and are provided by enterprises that see each other as partners. Web services is widely accepted and adopted to construct business process. Web services are built in exposed environment and open to security threats. When a web service contained in a business process is authorized to illegal users, it will cause economic loss of the service provider. Although there exist some standards for security of Web services and access control for services in distributed systems are well studied, there is a lack of comprehensive approach in access control for web services, especially in business process. In this paper, an extended RBAC model, called WS-RBAC, is proposed to secure web services in business process. The model takes web services in business process as protected objects and extends the classical RBAC model. Next, The software architecture of WS-RABC is presented. This paper also presents how to specify business process in the model and the authorization constraints of WS-RBAC based on WS-Policy.

The Model of Access Control of E-business Website based on PMI/RBAC

A Task-Role Based Access Control Model with Multi-Constraints

A Role-page Model Based Access Control Method for Web Applications

Realization Method about Access Control of System Based on Web

PMI Model Based on T-RBAC

An Access Control Model for Web Services in Business Process

An improved mechanism of authorization control based on Web environment

Access Control Method for B/S Architecture

A Role-Based Web Services Access Control Model

Method of Information System Authority Control Based on RBAC in Web Environment

Extended Access Control Model Based on RBAC

Research and implement on access control for mobile business platform based on ASP

A New Dynamic Hierarchical RBAC Model for Web Services

Design and Implementation of Privacy Protection Model Based RBAC

An Administration Model of DRBAC on the Web

Research on Context Environment of Access Control in Web-based Workflow Management System

Research on Access Control of WAN Management Information System

A MULTI-POLICY SERVICES-ORIENTED ATTRIBUTE-BASED ROLE-BASED ACCESS CONTROL MODEL

Research and implementation of access control on resource integration

Implementation of Role-Based Access Control Mechanism Based on Enterprise Fundamental Information Platform

An Extended RBAC Model for Web Services in Business Process