Abstract:Business process describes a set of services that span enterprise boundaries and are provided by enterprises that see each other as partners. Web services is widely accepted and adopted to construct business process. Web services are built in exposed environment and open to security threats. When a web service contained in a business process is authorized to illegal users, it will cause economic loss of the service provider. Although there exist some standards for security of Web services and access control for services in distributed systems are well studied, there is a lack of comprehensive approach in access control for web services, especially in business process. In this paper, an extended RBAC model, called WS-RBAC, is proposed to secure web services in business process. The model takes web services in business process as protected objects and extends the classical RBAC model. Next, The software architecture of WS-RABC is presented. This paper also presents how to specify business process in the model and the authorization constraints of WS-RBAC based on WS-Policy.

Role-Based Access Control Model for Workflow Systems

A Task-Role Based Access Control Model with Multi-Constraints

Access control mechanism of cooperation-oriented flexible workflow

Practical Way to Implement Role-Based Access Control in Security Administration System

A RBAC Model in Workflow Management System

A Semantic and Trust Based Framework for Rbac User-Role Assignment

Using Semantic Web Technologies to Specify Constraints of RBAC

Workflow Dynamic Authorization Model with Role-Based Access Control

Ontology-Based RBAC specification for interoperation in distributed environment

A Team-role-based Document Access Control Model

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

A task-oriented access control model for WfMS

Security Violation Detection for Role-Based Access Control Based Interoperation in Distributed Environment

An Access Control Model for Web Services in Business Process

Flexible Policy Access Control Model for Workflow Systems

Workflow Access Control Model and Dynamic User Assignment Policy

An Extended RBAC Model for Web Services in Business Process

Role-Based Access Control System for Web Services

Extended Access Control Model Based on RBAC

Realization Method about Access Control of System Based on Web

Types for Workflow Access Control in Web Service Context