Supporting authentication requirements in workflows

ICEIS 2006 - 8th International Conference on Enterprise Information Systems, Proceedings

Volumn ISAS, Issue , 2006, Pages 181-188

  Martinho, Ricardo ^a   Domingos, Dulce ^b   Rito Silva, António ^c  

^a POLYTECHNIC INSTITUTE OF LEIRIA   (Portugal)

^b UNIVERSITY OF LISBON   (Portugal)

^c INESC ID   (Portugal)

Author keywords

Authorization constraints; Role based access control; Workflow authentication requirements

Indexed keywords

ADDED VALUES; AUTHENTICATION INFORMATION; AUTHORIZATION CONSTRAINTS; AUTHORIZATION DECISION; BUSINESS PROCESS; ROLE-BASED ACCESS CONTROL; ROLE-BASED ACCESS CONTROL MODEL; SENSITIVE DATAS; WORK-FLOWS; WORKFLOW TECHNOLOGY;

ALGORITHMS; INFORMATION MANAGEMENT; INFORMATION SYSTEMS; INFORMATION USE; SECURITY OF DATA; SECURITY SYSTEMS;

AUTHENTICATION;

EID: 51849118807     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: None     Document Type: Conference Paper

References (16)

1. Bertino, E., Ferrari, E., and Atluri, V. (1999). The Specification and Enforcement of Authorization Constraints in Workflow Management Systems. ACM Trans. Inf. Syst. Secur., 2(1):65-104.
2. Beznosov, K. (1998). Requirements for access control: Us healthcare domain. In RBAC '98: Proceedings of the third ACM workshop on Role-based access control, page 43, New York, NY, USA. ACM Press.
3. Casati, F., Castano, S., and Fugini, M. (2001). Managing workflow authorization constraints through active database technology. Information Systems Frontiers, 3(3):319-338.
4. Casati, F., Castano, S., and Fugini, M. G. (1998). Enforcing workflow authorization constraints using triggers. Journal of Computer Security, 6(4):257-285.
5. Ferraiolo, D. F., Sandhu, R. S., Gavrila, S. I., Kuhn, D. R., and Chandramouli, R. (2001). Proposed NIST Standard for Role-based Access Control. Information and System Security, 4(3):224-274.
6. Hung, P. C. K. and Karlapalem, K. (2003). A secure workflow model. In CRPITS '03: Proceedings of the Australasian information security workshop conference on ACSW frontiers 2003, pages 33-41, Darlinghurst, Australia, Australia. Australian Computer Society, Inc.
7. INESC Lisboa Software Engineering Group (2004). WorkSCo: Workflow with Separation of Concerns. http://sourceforge.net/projects/worksco/.
8. Kandala, S. and Sandhu, R. (2002). Secure Role-Based Workflow Models. In DAS'01: Proceedings of the fifteenth Annual Working Conference on Database and Application Security, pages 45-58, Niagara, Ontario, Canada. Kluwer Academic Publishers.
9. Kent, S. T. and Millett, L. I., editors (2003). Who goes There? Authentication Through the Lens of Privacy. National Academies Press, Washington, DC, USA.
10. Moodahi, I., Gudes, E., Lavee, O., and Meisels, A. (2004). A SecureWorkflow Model Based on Distributed Constrained Role and Task Assignment for the Internet. In ICICS'04: Proceedings of the sixth International Conference on Information and Communications Security, pages 171-186, Malaga, Spain. Springer-Verlag.
11. Muehlen, M. Z. (2004). Organizational Management in Workflow Applications - Issues and Perspectives. Inf. Tech. and Management, 5(3-4):271-291.
12. OASIS (2005). SAML V2.0 Executive Overview. Technical report, Organization for Advancement of Structured Information Standards.
13. Samarati, P. and di Vimercati, S. D. C. (2000). Access Control: Policies, Models, and Mechanisms. In FOSAD '00: Revised versions of lectures given during the IFIP WG 1.7 International School on Foundations of Security Analysis and Design, pages 137-196, Bertinoro, Italy. Springer-Verlag.
14. Tzelepi, S. and Pangalos, G. (2001). A flexible access control model for multimedia medical image security. In PCM '01: Proceedings of the Second IEEE Pacific Rim Conference on Multimedia, pages 1030-1035, Beijing, China. Springer-Verlag.
15. Wang, L., Wei, L., Liao, X., and Wang, H. (2004). AT-RBAC: An Authentication Trustworthiness-Based RBAC Model. In GCC Workshops, pages 343-350, Wuhan, China. Springer-Verlag.
16. Workflow Management Coalition (1999). Terminology & Glossary. Technical report, Workflow Management Coalition.