Access control in workflow management systems based on rule strategy

JIAO Zhen-hai,DING Er-yu,LUO Bin

2008-01-01

Abstract:This paper presented a design and implemented approach of rule strategy based access control to fulfill this requirement.And started with the set expressions and definition of the rule model,and focused on the implement of rule interpreter and some detailed algorithms.At last,also presented a practical application.

What problem does this paper attempt to address?

Access control mechanism of cooperation-oriented flexible workflow

LI Jinyan,YU Zhonghua

DOI: https://doi.org/10.13196/j.cims.2017.06.009

2017-01-01

Abstract:With gradual improvement of collaborative manufacturing mode,the played an important role for the adjustment of organizational structure and business process reengineering.How to balance the To solve the problem that collaboration oriented flexible workflow should combine flexibility and security in dynamic environment,according to the characteristics of collaborative,the concept of team was introduced based on the hierarchical authorization management to realize the combination of role-based static authorization and task-based dynamic control,and a novel access control model was proposed for cooperation-oriented flexible workflow.As for the potential conflict of constraints at different levels due to the flexibility and cooperation,task-based separation of duty was provided,so as to better solve the problem of information security and access control for flexible workflow in dynamic environment.
Study on the Application of Role-based Access Control in Workflow Management System

liu jianxun,zhang shensheng,bu fenglin

DOI: https://doi.org/10.3969/j.issn.1000-1220.2003.06.032

2003-01-01

Abstract:Taking the characteristics of WFMS (workflow management system) and the requirement of real application into consideration, this paper presents a role based access control model, which is suitable to workflow management systems, and applies it to the process discomposing based workflow model. The problem of the static and dynamic constraints in role based access control and authorization is introduced in some detail. Finally, it analyzes the architecture and implementation of a WFMS enactment system which supports RBAC.
Research on modeling of J2EE-based workflow management system

GONG Xiao-jun,LIN Lan-fen

DOI: https://doi.org/10.3969/j.issn.1000-7024.2006.05.017

2006-01-01

Abstract:Workflow is a technology implementing enterprise informatization of complicated business.Modeling with UML to develop the workflow management system can improve consistency and reusability.The architecture of lightweight J2EE-based workflow mana-gement system was analyzed firstly.Then the steps and methods of modeling throughout all phases of the software developing were in-troduced.According to these,the application of objected-oriented modeling language UML in modeling the system in every phase was discussed in detail.
Executive validation analysis of workflow process

Xiaoping Qiu,Jiacheng Zheng,Yongchuan Tang,Yang Xu

DOI: https://doi.org/10.1109/WCICA.2004.1342089

2004-01-01

Abstract:In the workflow management system, the process definition is finished by the process definition tools and explained and enacted by the workflow enactment service. The method in which the application logic and the process logic are separated improves the reuse rate of the software and the efficiency of the system by modifying the process model rather than the material functions. We adopt the practicable automated reasoning method to analyze the executive validation after the workflow process defined in this paper. The method includes two steps. In the first step, the basic relations between the activities in the workflow process is discussed, and then the transformation rules from the workflow process to a clause set is given. The automated reasoning based on path searching is proposed for judging the satisfiability of the clause set and finding out the executive validation of the workflow process in the second step. Experimental results show that this method is effective for WfMS.
ROLE-BASED ACCESS CONTROL MODEL FOR ADAPTIVE WORKFLOW SYSTEMS

Yang Shuxin,Zheng Jian,Wang Jian

DOI: https://doi.org/10.3969/j.issn.1000-386X.2009.02.017

2009-01-01

Abstract:Some existing access control model for workflow systems are limited to tasks execution.It is difficult to satisfy the security requirement for adaptive workflow systems.To solve the problem,operation behaviors of adaptive workflow management systems are analyzed and summarized.Object,user and operation are considered as the main elements for research.Formal description and fine granularity partition about these elements are given.Finally,based on the above work,a role-based access control model and integration with systems are proposed,and relationships among role,user and operation are described.In addition,authorization method is given to guarantee operation security and rationality.The problem of security is solved effectively,and the users' flexible requirements for permission are satisfied.
Modeling of Constraint Rule in Workflow Resource Allocation

Shaoxiong Lü,Lijie Wen,Jianmin Wang,Rui Han

2009-01-01

Journal of Computer Research and Development

Abstract:When allocating resource in traditional workflow systems,researchers consider more on allocating resources such as organization,role and person for work items but less on modeling the potential constraint relationship among resources al located to different task nodes.In this paper,according to the practical enterprise requirements,such potential resource constraint relationships are extracted and modeled in the form of rules.Finally,a powerful tool,rule engine,is used to realize the rule collision detection and the rule implement.
Design and Application of Rule Based Access Control Policies

Huiying Li,Xiang Zhang,Honghan Wu,Yuzhong Qu

2005-01-01

Abstract:Access control is an important issue among the security problems of resources in distributed systems. In order to enable entities in distributed systems to understand and interpret policies correctly, common concern is drawn to the problem of expressing access control policies with semantic information. In this paper, we introduce how to express access control policies based on OWL and SWRL. It includes a definition of OWL ontology to describe the terms and a declaration of SWRL rules to explicit the relationship between properties. Finally some use cases are given to explain how to express policies in form of rule using the terms defined beforehand.
Role-Based Access Control Model for Workflow Systems

MA Liang,GU Ming

DOI: https://doi.org/10.3969/j.issn.1000-1220.2006.01.031

2006-01-01

Abstract:Nowadays workflow is coming into more and more notice in many areas such as OA, e-government, e-business. Security is a important problem in workflow environment. Access control is a vital component of Security. In this paper, a RBAC model in workflow environment (WRBAC) is introduced. The model is based on proposed NIST standard for RBAC, formally describes the relationship between the key elements of access control in workflow systems such as user, role, permission and activity, presents the static and dynamic constraints. The model can effectively reduce the risk of information leakage and fraud, meet the requirements for access control in workflow systems.
Using Business Rule Engine to Integrate Electronic Form with Workflow Management System

Guanfu Jiang,Bin Cao,Jia Wang,Jianwei Yin

DOI: https://doi.org/10.1109/ITAP.2011.6006292

2011-01-01

Abstract:Electronic form system integrates with workflow management system (WFMS) more and more closely nowadays. However, there are still some serious problems existing in the integration, which are as follows: 1) Achieving the aim of correct access control of form elements, 2) Mapping parameters between workflow variable and form elements, and 3) Customizing and reusing the process of form elements to decline the coupling between electronic form system and workflow management system. To resolve the above problems, we propose a new framework, adopting business rule engine as the intermediary to integrate electronic form with workflow management system. This design involves dynamic configuration for the access control of form elements, special parameters mapping combined with business rule engine, and loosely coupled form elements processing.
Workflow Access Control Model and Dynamic User Assignment Policy

YUN Ya-li,HAN Hai-xiao,LI Ya-ping

DOI: https://doi.org/10.3969/j.issn.1000-3428.2013.04.018

2013-01-01

Abstract:In order to solve the problem of inflexible access control and lack of dynamic task allocation for workflow,this paper presents a new workflow access control model.It integrates both users and roles authorization on workflow tasks in two level of modeling stage and instance stage,and also designs dynamic user assignment rules for the model by introducing the load equilibrium-based user assignment strategy on the user busy factor.Analysis result shows that this model can produce dynamic user assignment according to history executive condition,and improve workflow's executive efficiency.
Workflow Dynamic Authorization Model with Role-Based Access Control

裘炅,谭建荣,张树有,马晨华

DOI: https://doi.org/10.3321/j.issn:1003-9775.2004.07.020

2004-01-01

Abstract:The model formally describes the key elements of access control such as role, user, privilege, task unit, authorization strategy, authorization constraint and the relationship between these elements. We identify the following four types of authorization constraints: require role constraints, require user constraints, deny role constraints and deny user constraints, then provide constraint consistency checking rules upon them. In this model, authorization flow is synchronized with workflow and the workflow can be efficiently executed through the constraint consistency checking rules. The main advantage of the model is its comprehensiveness, flexibility and practicability.
Flexible Policy Access Control Model for Workflow Systems

马晨华,陆国栋,裘炅

DOI: https://doi.org/10.3785/j.issn.1008-973x.2008.12.014

2008-01-01

Abstract:Access control models proposed so far cannot satisfy the access requirements in workflow systems very well.To address the issue,a flexible policy access control model for workflows was proposed.By the introduction of authorization certificate,which defines the authorization that can be performed during task execution and the constraints should be satisfied,dynamic access control in workflows is realized and the flexible definition of authorization policies is supported.For the description of complicated authorization rules,authorization certificate related constraints were defined.Furthermore,efficient conflict detection and resolution rules for authorization constraints were also provided.Analysis shows that the model has good security and practicability.It can meet the requirements for access control in workflow systems adequately.
Research on Context Environment of Access Control in Web-based Workflow Management System

SHAN Qiyi,GAO Jianmin,CHEN Liang

DOI: https://doi.org/10.3969/j.issn.1001-3881.2006.10.009

2006-01-01

Abstract:Access control mechanism is an increasingly important content in security policy of distributed workflow management system.Based on the RBAC model,the new requirement of access control mechanism in workflow environment was analyzed,a WS_RBAC model was built to realize the access control in Web-based WFMS and the representation of context constraints was analyzed.The external quality system examination was taken as example,the model and context constraints introducing were validated.
Realization Method about Access Control of System Based on Web

BAO Zhigang,HU Yanjun,GU Xinjian

DOI: https://doi.org/10.3969/j.issn.1000-3428.2006.01.059

2006-01-01

Abstract:Firstly making reference to role based access control(RBAC)model,this paper proposes the basic idea about access control.Then it introduces database design of two realizing methods about access control and two methods’ realization in program,it also presents visual effect.Finally it analyzes and compares one to another in detail from two aspects of applicability and reusability.
Authorization and Access Control of Application Data in Workflow Systems

Shengli Wu,Amit Sheth,John Miller,Zongwei Luo

DOI: https://doi.org/10.1023/A:1012972608697

2002-01-01

Journal of Intelligent Information Systems

Abstract:Workflow Management Systems (WfMSs) are used to support the modeling and coordinated execution of business processes within an organization or across organizational boundaries. Although some research efforts have addressed requirements for authorization and access control for workflow systems, little attention has been paid to the requirements as they apply to application data accessed or managed by WfMSs. In this paper, we discuss key access control requirements for application data in workflow applications using examples from the healthcare domain, introduce a classification of application data used in workflow systems by analyzing their sources, and then propose a comprehensive data authorization and access control mechanism for WfMSs. This involves four aspects: role, task, process instance-based user group, and data content. For implementation, a predicate-based access control method is used. We believe that the proposed model is applicable to workflow applications and WfMSs with diverse access control requirements.
User-Grouped and Role-Based Access Control for Scientific Workflow Management Systems

刘灿灿,骆志刚,张卫民,刘俊铖,王刚

DOI: https://doi.org/10.3969/j.issn.1007-130x.2008.05.026

2008-01-01

Abstract:The access control mechanism is the important part of security control in scientific workflow management systems. Based on the role-based access control(RBAC) in business workflow management systems, we provide a user-grouped role-based access control(UGRBAC) mechanism by taking the requirements and characteristics of scientific workflow into account. Moreover, we implement an access control model,which can provide a way for all kinds of consumers to access the resources and services in the period of designing and executing,and give providers a way to enact permissions to others to access the services and resources.
An ECA-Rule-Based workflow management approach for web services composition

Yi Wang,Minglu Li,Jian Cao,Feilong Tang,Lin Chen,Lei Cao

DOI: https://doi.org/10.1007/11590354_19

2005-01-01

Abstract:Composing autonomous Web services to achieve new function, is receiving more and more attention in recent years in several computer science communities. The workflow model is the most important part in Web services composition. However, the existing approaches have difficulties in the process because their complexity. In this paper, we have developed an ECA (Event-Condition-Action)-rule-based workflow management system (EWMS) for Web service composition, which can help users compose Web services conveniently. We also use an image processing application to validate the feasibility and efficiency of our system.
A RBAC Model in Workflow Management System

XIONG Yun,BAI Xiaoying

2006-01-01

Abstract:This paper proposes a Wf-RBAC model based on RBAC96 model to enhance the flexibility and effectiveness of permission management and access control in workflow management systems(WfMS).The paper also puts forward a three-level implementation strategy of the extended workflow systems.It introduces the prototype of supporting tool.
Research on Access Control Technology of Work Flow System

鞠秀芳,孙建军,陈鑫

DOI: https://doi.org/10.3969/j.issn.1007-7634.2005.01.022

IF: 8.1

2005-01-01

Information Sciences

Abstract:In this paper,we solve the problem how to integrate access control service into work flow systems.Several access control models are introduced by formalized definition.And their features are compared based on the security requirement of work flow systems.The existing problem of current model and future research direction is discussed in the end.
Business Process Modeling Based on Role and Rule

MAO Xue-qin,LIU Hou-quan

DOI: https://doi.org/10.3969/j.issn.1000-7024.2007.15.066

2007-01-01

Abstract:Workflow is the automation of a business process in whole or part.To abstract the business process and model business process modeling is the first step of workflow management activity-centered workflow management system emphasizes process execution so much that the role of the organization is ignored.Business process is modeled by roles and rules,and proposes a one-dimensional model only including roles is proposed.To achieve business goals,the roles interact with each other though messages and processes are controlled bye rules— — ECAA rules.The messages from one role are processed by rule engines then transmit to another.Every role has it's own rules.

Access control in workflow management systems based on rule strategy

Access control mechanism of cooperation-oriented flexible workflow

Study on the Application of Role-based Access Control in Workflow Management System

Research on modeling of J2EE-based workflow management system

Executive validation analysis of workflow process

ROLE-BASED ACCESS CONTROL MODEL FOR ADAPTIVE WORKFLOW SYSTEMS

Modeling of Constraint Rule in Workflow Resource Allocation

Design and Application of Rule Based Access Control Policies

Role-Based Access Control Model for Workflow Systems

Using Business Rule Engine to Integrate Electronic Form with Workflow Management System

Workflow Access Control Model and Dynamic User Assignment Policy

Workflow Dynamic Authorization Model with Role-Based Access Control

Flexible Policy Access Control Model for Workflow Systems

Research on Context Environment of Access Control in Web-based Workflow Management System

Realization Method about Access Control of System Based on Web

Authorization and Access Control of Application Data in Workflow Systems

User-Grouped and Role-Based Access Control for Scientific Workflow Management Systems

An ECA-Rule-Based workflow management approach for web services composition

A RBAC Model in Workflow Management System

Research on Access Control Technology of Work Flow System

Business Process Modeling Based on Role and Rule