Separation of duties for access control enforcement in workflow environments

IBM Systems Journal

Volumn 40, Issue 3, 2001, Pages 666-682

  Botha, R A ^a   Eloff, J H P ^a  

^a NELSON MANDELA METROPOLITAN UNIVERSITY   (South Africa)

Author keywords

[No Author keywords available]

Indexed keywords

CRYPTOGRAPHY; INFORMATION MANAGEMENT; SECURITY OF DATA;

ROLE-BASED ACCESS CONTROL (RBAC);

COMPUTER NETWORKS;

EID: 0034810791     PISSN: 00188670     EISSN: None     Source Type: Journal    
DOI: 10.1147/sj.403.0666     Document Type: Article

References (30)

1. Turning points in interaction with computers
2. The workflow management coalition refers to activities but recognizes tasks as a synonym
3. Specification and enforcement of authorization constraints in workflow management systems
4. Access control mechanisms for inter-organizational workflow
5. Injecting RBAC to secure a web-based workflow system
6. Role-based access control models
7. The protection of information in computer systems
8. A comparison of commercial and military computer security policies
9. Transaction control expressions for separation of duties
10. Separation of duties in computerized information systems
11. Some conundrums concerning separation of duty
12. Role-Based Access Control (RBAC): Features and motivations
13. Separation of duty in role-based environments
14. Mutual exclusion of roles as a means of implementing separation of duty in role-based access control systems
15. On the formal definition of separation of duty policies and their composition
16. The role-graph model and conflict of interest
17. The RSL99 language for role-based separation of duty constraints
18. Towards a task-based paradigm for flexible and adaptable access control in distributed applications
19. Conceptual foundations for a model of task-based authorizations
20. Task-Based Authorization Controls (TBAC): A family of models for active and enterprise-oriented authorization management
21. Task-Role Based Access Control (TRBAC): An improved access control model for enterprise environment
22. Conflict analysis as a means of enforcing static separation of duty requirements in workflow environments
23. An authorization model for workflows
24. A context-sensitive access control model and prototype implementation
25. Active database systems
26. Beyond documents: Sharing work