A delegation-based workflow access control model

Proceedings of the 1st International Symposium on Data, Privacy, and E-Commerce, ISDPE 2007

Volumn , Issue , 2007, Pages 478-483

  Wei, Yonghe ^a,b   Shu, Quin ^a  

^a SHENYANG LIGONG UNIVERSITY   (China)

^b NORTHEASTERN UNIVERSITY   (China)

Author keywords

[No Author keywords available]

Indexed keywords

ACCESS CONTROL; ARSENIC COMPOUNDS; COMMERCE; ELECTRONIC COMMERCE; MANAGEMENT; PUBLIC POLICY; SECURITY SYSTEMS;

BUSINESS PROCESSES (BP); DELEGATOR; E-COMMERCE; INTERNATIONAL SYMPOSIUM; PROCESS MODELLING; WORKFLOW ACCESS CONTROL;

PROCESS CONTROL;

EID: 48049113670     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ISDPE.2007.90     Document Type: Conference Paper

References (12)

1. Karin Venter, and Martin S Olivier, "The Delegation Authorization Model: A Model for the Dynamic Delegation of Authorization Rights in a Secure Workflow Management System", ISSA2002, Muldersdrift, South Africa, 2002, Published electronically, http://mo.co.za
2. V. Atluri, and W.Huang, "An authorization Model for Workflow", In Proceedings of the 5th European symposium on research in computer security, Rome, Italy, 1996, pp 44-64.
3. S. Kandala, and R. Sandhu, "Secure Role-Based Workflow Models", Database Security XV: Status and Prospects, Kluwer 2002.
4. E. Bertino, E. Bonatti, and E. Ferrari, "TRBAC: A Temporal Role-Based Access Control Model", ACM Transactions on Information and System Security, Vol.4, No. 3,August 2001, pp 191-223.
5. R.Sandhu, E.Coyne,H. Feinstein, and C. Youman, "Role-Based Access Control Models", IEEE Computer, Vol.29, No. 2, February 1996, pp 38-47.
6. V. Atluri, and J. Warner, "Supporting Condition Delegation in Secure Workflow Management Systems", ACM Symposium on Access Control Models and Technologies (SACMAT'05), Stockholm, Sweden, June 1-3, 2005, pp 49-58
7. J. Wainer, A. Kumar, and P. Barthelmess, "DW-RBAC: A formal security model of delegation and revocation in workflow systems", Information Systems, Vol 32, No. 3, May 2007, pp 365-384.
8. C. Ellison, B. Frantz, B. Lampson, R. Rivest, B. Thomas, and T. Ylonen. "SPKI Certificate Theory", RFC2693, http://www.ieft.org/rfc/rfc2693. txt, 1999.
9. Ezedin Brarka and Ravi Sandhu, "Framework for Role-based Delegation Model", Proceedings of 23th National Information Systems Security Conference, Baltimore, Oct. 16-19,2000,pp 101-114
10. Jason Crampton and Hemanth Khambhammettu, "Delegation in Role-Based Access Control", ESORICS 2006, Hamburg, 2006, pp 174-191
11. J. Wainer, and A. Kumar, "A fine-grained, controllable, user-to-user delegation method in RBAC", in Proceedings of ACM Symposium on Access Control Models and Technologies(SACMAT 05), Stockhlm, Sweden, 2005,pp 59-66
12. L. Zhang, G. Ahn, and B. Chu, "A rule-based framework for role-based delegation and revocation", ACM Trans. Inf. Syst. Secur. 6(3), 2003, pp 404-441