NDLI: A flexible policy-based access control model for Workflow Management Systems

Content Provider	IEEE Xplore Digital Library
Author	Gang Ma Kehe Wu Tong Zhang Wei Li
Copyright Year	2011
Description	Author affiliation: School of Control and Computer Engineering, North China Electric Power University, Beijing, China (Kehe Wu; Tong Zhang; Wei Li) \|\| School of Electrical & Electronic Engineering, North China Electric Power University, Beijing, China (Gang Ma)
Abstract	In recent years, Workflow Management Systems (WFMSs) have gained ground both in research and commercial realms. More and more attentions have been paid on the security of WFMSs. Access control is crucial to security management in WFMSs. Firstly, this paper analyses the dynamic and flexible requirements of access control in the enterprise WFMSs. Then, proposing a novel dynamic access control model which incorporates authorization policies to meet the particular requirement of WFMSs, named PBFW. Different from existing works, the proposed access control model support to grant or revoke permissions to/from roles/users according to the context of WFMSs. Besides, the model enforces separation of duty (SoD) policies during runtime and supplies access control of appropriate granularity for WFMSs. A prototype system is developed to realize the effectiveness of the proposed access control model.
Starting Page	533
Ending Page	537
File Size	185990
Page Count	5
File Format	PDF
ISBN	9781424487271
e-ISBN	9781424487288
DOI	10.1109/CSAE.2011.5952526
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2011-06-10
Publisher Place	China
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Authorization Procurement Workflow management system Separation of duty Computational modeling Prototypes Authorization management Materials Policy-based access control Security constrains
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

FWAM: A flexible workflow authorization model using extended RBAC

Authorization constraint enforcement for information system security

The consistency of task-based authorization constraints in workflow systems (2004)

Soda: a model for the administration of separation of duty requirements in workflow systems (2001).

Flexible Authorization with Decentralized Access Control Model for Grid Computing

Access Control Policy Model for Implementing Network Based Authorization Framework

The Delegation Authorization Model: A Model For The Dynamic Delegation Of Authorization Rights In A Secure Workflow Management System (2002)

Dynamic and Secure Control Model for Workflow Management System

Aligning Security and Business Objectives for Process-Aware Information Systems

A flexible policy-based access control model for Workflow Management Systems

Similar Documents

FWAM: A flexible workflow authorization model using extended RBAC

Authorization constraint enforcement for information system security

The consistency of task-based authorization constraints in workflow systems (2004)

Soda: a model for the administration of separation of duty requirements in workflow systems (2001).

Flexible Authorization with Decentralized Access Control Model for Grid Computing

Access Control Policy Model for Implementing Network Based Authorization Framework

The Delegation Authorization Model: A Model For The Dynamic Delegation Of Authorization Rights In A Secure Workflow Management System (2002)

Dynamic and Secure Control Model for Workflow Management System

Aligning Security and Business Objectives for Process-Aware Information Systems

A flexible policy-based access control model for Workflow Management Systems