Abstract:Access control models proposed so far provide no support for context-based dynamic authorization and flexible authorization policy definition for tasks.To address these issues,a flexible context-constraint-based access control model was proposed for workfolws.The concepts of contextconstraint-based role assignment policy and context-constraint-based role authorization policy were defined.The interrelationships between policies were analyzed and the conflicts exhibited by policies were classified.Static and dynamic conflict detection methods were provided to maintain the consistency of policies.By the introduction of two new concepts,priority rule and conflict resolution policy,a flexible approach to resolve conflicts were provide.The security administrator can choose the method of resolving conflicts flexibly according to system requirements by defining priority rules and conflict resolution policies.Furthermore,the role assignment algorithm and the authorization decision algorithm based on the minimum sets of role assignment policies and role authorization policies were given.The model provides support for context-based dynamic authorization,automatic user-role and role-permission assignment.

Dynamic Access Control Method in Collaborative Enterprise Modeling

Multi-level Access Control for Collaborative CAD

Access control mechanism of cooperation-oriented flexible workflow

A Task-Role Based Access Control Model with Multi-Constraints

Dynamic Security Access Control Model Based on System Reliability

Securing Role-Based Distributed Collaboration System

Research on Entity Model of Network-Based Collaborative Commerce Chain

Multilevel Multi-policy Access Control Model for Collaborative Application

Access Control for Collaborative Environment in Networked Manufacturing System

Secure Information Exchange Model Between PDM Systems

Community-based Model and Access Control for Information Grid

An Authorization Model for Collaborative Access Control

RBAC based access control model for services compositions cross multiple enterprises

Managing Data Security in E-Markets through Relationship Driven Access Control

Flexible Context-Constraint-based Access Control Model for Workflows

A Flexible Access Control Model for Enterprise Information Management Systems

Dynamic Role-based Access Control for Web Services Using Context and Trust

Supporting Security in Dynamic Cooperation of Cross-Enterprise Services

Task-activity Based Access Control for Process Collaboration Environments

A Team-role-based Document Access Control Model

Using Semantics for Dynamic Access Control of XML Documents in Dynamic Coalition Environment.