Flexible Policy Access Control Model for Workflow Systems

马晨华,陆国栋,裘炅
DOI: https://doi.org/10.3785/j.issn.1008-973x.2008.12.014
2008-01-01
Abstract:Access control models proposed so far cannot satisfy the access requirements in workflow systems very well.To address the issue,a flexible policy access control model for workflows was proposed.By the introduction of authorization certificate,which defines the authorization that can be performed during task execution and the constraints should be satisfied,dynamic access control in workflows is realized and the flexible definition of authorization policies is supported.For the description of complicated authorization rules,authorization certificate related constraints were defined.Furthermore,efficient conflict detection and resolution rules for authorization constraints were also provided.Analysis shows that the model has good security and practicability.It can meet the requirements for access control in workflow systems adequately.
What problem does this paper attempt to address?