W-RBAC - A workflow security model incorporating controlled overriding of constraints

International Journal of Cooperative Information Systems

Volumn 12, Issue 4, 2003, Pages 455-485

  Wainer, Jacques ^a   Barthelmess, Paulo ^b   Kumar, Akhil ^c  

^a UNIVERSITY OF CAMPINAS   (Brazil)

^b UCB 450   (United States)

^c PENNSYLVANIA STATE UNIVERSITY   (United States)

Author keywords

Access control; Constraints; RBAC; Workflow management

Indexed keywords

AUTOMATION; COMPUTER PROGRAMMING LANGUAGES; INFORMATION ANALYSIS; OPTIMIZATION;

ACCESS CONTROL; WORKFLOW MANAGEMENT;

CONTROL SYSTEMS;

EID: 0348209180     PISSN: 02188430     EISSN: None     Source Type: Journal    
DOI: 10.1142/S0218843003000814     Document Type: Article

References (21)

1. G.-J. Ahn and R. Sandhu, The RSL99 language for role-based separation of duty constraints, ACM RBAC Workshop 99, 43-54, 1999.
2. E. Barka and R. Sandhu, Framework for role-based delegation models, 16th Annual Computer Security Applications Conference, 2000.
3. E. Bertino, E. Ferrari and V. Atluri, A flexible model supporting the specification and enforcement of role-based authorization in workflow management systems, Proc. of the Second ACM Workshop on Role-Based Access Control, 1997, 1-12.
4. E. Bertino, E. Ferrari and V. Atluri, The specification and enforcement of authorization constraints in workflow management systems. ACM Transactions on Information and System Security 2, 1 (1999) 65-104.
5. E. Bertino, S. De Capitani Di Vimercati, E. Ferrari and P. Samarati, Exception-based information flow control in object-oriented systems, ACM Transactions on Information and System Security 1, 1 (1998) 26-65.
6. S. Castano, F. Casati and M. Fugini, Managing workflow authorization constraints through active database technology, Information Systems Frontiers 3, 3, 2001.
7. D. Ferraiolo, J. Cugini and R. Kuhn, Role-based access control (RBAC): Features and motivations, Proceedings of 11th Annual Computer Security Application Conference, New Orleans, LA, December 1995, 241-248, http://hissa.ncsl.nist.gov/rbac/newpaper/rbac.ps.
8. C. Goh and A. Baldwin, Towards a more complete model of roles, 3rd ACM Workshop on Role-Based Access, 1998, 55-61.
9. P. C. K. Hung, K. Karlapalem and J. W. Gray III, A study of least privilege in CapBasED-ams, Proc. of the 3rd IFCIS International Conference on Cooperative Information Systems, 1998, 208-217.
10. K. Karlapalem and P. Hung, Security enforcement in activity management systems, Advances in Workflow Management Systems and Interoperability, 1997, 166-194.
11. A. Kumar, A Framework for handling delegation in workflow management systems. Proc. of Workshop on Information Technology and Systems (WITS), 1999.
12. N. Li, J. Feigenbaum and B. Grosof, A logic-based knowledge representation for authorization with delegation (extended abstract), Proc. 12th Int. IEEE Computer Security Foundations Workshop, 1999.
13. J. A. Miller, M. Fan, S. Wu, I. B. Arpinar, A. P. Sheth and K. J. Kochut, Security for the Meteor workflow management system, UGA-CS-LDIS Technical Report, University of Georgia, 1999.
14. M. Nyanchama and S. Osborn, The role graph model and conflict of interest, ACM Transactions on Information and System Security 2, 1 (1999) 3-33.
15. S. Osborn and Y. Guo, Modeling users in role-based access control, ACM RBAC 2000, 2000, 31-37.
16. G. Sanchez, The wide project: Final report, Technical Report, Wide Consortium, 1999.
17. R. Sandhu, E. Coyne, H. Feinstein and C. Youman, Role-based access control models, IEEE Computer 29, 2 (1996) 38-47.
18. R. Sandhu, Transaction control expressions for separation of duties, Proc. of the Fourth Computer Security Applications Conference, 1988, 282-286, http://citeseer.nj.nec.com/84322.html.
19. R. Simon and M. E. Zurko, Separation of duty in role-based environments, Proc. of the 10th Computer Security Foundations Workshop (CSFW '97), 1997.
20. J. Wainer, Logic representation of processes in work activity coordination, Proceedings of the ACM Symposium on Applied Computing, Coordination Track, 2000, 203-209.
21. J. Wainer, A. Kumar and P. Barthelmess, Security management in the presence of delegation and revocation in workflow systems, Technical Report IC-01-14, Instituto de Computação, UNICAMP, 2001, http://www.ic.unicamp.br/ic-tr-ftp/2001/Titles.html.