An Access Control Model for Workflow in Service Oriented Environment

Abstract:

Workflow access control is an important issue in workflow security. Although there exist some standards for security of Web services and access control for services in distributed systems are well studied, there is a lack of comprehensive approach in access control for web services, especially in workflow. This paper proposes a service oriented workflow model and its access control model. The basic authorization unit is task service which is an abstraction of task in the access control model. In this context, we present the dynamic separation of duty based on task services and their conflict relations. Furthermore, we show this model satisfies access control requirements in workflow.

• Periodical: Applied Mechanics and Materials (Volumes 16-19)
• Pages: 288-292
• DOI: https://doi.org/10.4028/www.scientific.net/AMM.16-19.288
• Online since: October 2009
• Authors: Yong He Wei, Yong Ping Hao, Yang Wang
• Keywords: Access Control (AC), Separation of Duty, Service-Oriented, Workflow

References

[1] S. Indrakanti and V. Varadharajan: Proc. IFIP International Federation for Information Processing (Nagasaki, Japan, December 06-09, 2005), pp.222-236.

[2] E. Bertino, J. Crampton and F. Paci: Proc. IEEE International Conference on Web Services (Chicago, USA, September 18-22, 2006), pp.275-284.

[3] E. Bertino, E. Ferrari and V. Atluri: Journal of ACM Transactions on Information and System Security, Vol. 2 (1999) No. 1, pp.65-104.

[4] V. Atluri and W.K. Huang: Proc. the Fourth European Symposium on Research in Computer Security (Rome, Italy, September, 1996), pp.44-64.

[5] D.R. Liu, M.Y. Wu and S.T. Lee: Journal of Systems and Software, Vol. 73 (2004) No. 3, pp.375-387.

[6] S. Perelson, R. Botha and J. Eloff: Journal of South African Computer Journal, Vol. 27 (2001) No. 3, pp.64-69.