A location-aware access control model for mobile workflow systems

International Journal of Information Technology and Web Engineering

Volumn 4, Issue 1, 2009, Pages 50-66

  Decker, Michael ^a  

^a UNIVERSITY OF KARLSRUHE   (Germany)

Author keywords

Access control; Location aware computing; Mobile workflow systems; Security model

Indexed keywords

INFORMATION MANAGEMENT; INFORMATION SYSTEMS; LOCATION; MANAGEMENT INFORMATION SYSTEMS; WORK SIMPLIFICATION;

ACCESS CONTROL MODELS; LOCATION-AWARE COMPUTING; MOBILE INFORMATION SYSTEMS; MOBILE WORKFLOW SYSTEM; SECURITY CHALLENGES; SECURITY MODEL; WIRELESS DATA TRANSMISSION; WORKFLOW MANAGEMENT SYSTEMS;

ACCESS CONTROL;

EID: 70249128344     PISSN: 15541045     EISSN: 15541053     Source Type: Journal    
DOI: 10.4018/jitwe.2009010104     Document Type: Article

References (28)

1. Alonso, G., Günthör, R., Kamath, M., Agrawal D., El Abbadi, A., & Mohan, C. (1996). Exotica/ FMDC: A Workflow management System for Mobile and Disconnected Clients. Distributed and Parallel Databases, 4(3), 229-247.
2. th European Symposium on Research in Computer Security (ESORICS), London, U.K., Springer, 44-64.
3. Bell, D. E., & LaPadula, J. (1976). Secure Computer System: Unified Exposition and Multics Interpretation. Technical Report of MITRE Corporation, Bradford, MA, U.S.A.
4. Benantar, M. (2006). Access Control Systems. Security, Identity Management and Trust Models. Springer, New York et al.
5. Bertino, E., Ferrari, E., & Atluri, V. (1999). The Specification and Enforcement of Authorization Constraints in Workflow Management Systems. ACM Transactions on Information and System Security. 2(1), 1999, 65-104.
6. th International Conference on Web Information Engineering (WISE), New York, USA, Springer, 361-375.
7. Decker, M. (2008): Location Privacy - An Overview. Proceedings of the International Conference on Mobile Business (ICMB), IEEE, Barcelona, Spain.
8. Damiani, M. L, Bertino, E., & Perlasca, P. (2007). Data Security in Location-Aware Applications: An Approach Based on RBAC. International Journal of Information and Computer Security. 1(1/2), 5-38.
9. th IEEE Workshop on Mobile Computing System & Applications (WMCSA), Washington, DC, USA, IEEE, 10-18.
10. Denning, D. E., & Denning, P. J. (1979). Data Security. ACM Computing Surveys. 11(3), 227-249.
11. Denning, D., & MacDoran, P. (1996). Location- Based Authentication: Grounding Cyberspace for Better Security. Computer Fraud & Security, February 1996, 12-16.
12. Dourish, P. (2003): What we talk about when we talk about context. Personal Ubiquitous Computing, 8(1), 19-30.
13. nd Edition)
14. Hansen, F., & Oleshchuk, V. (2003). SRBAC: A Spatial Role-Based Access Control Model for Mobile Systems. Proceedings of the Nordic Workshop on Secure IT Systems (NORDSEC), Gjovik, Norway, 129-141.
15. Hightower, J., & Boriello, G. (2001). Location Systems for Ubiquitous Computing. IEEE Computer, 34(8), 57-66.
16. Jing, J., Huff, K., Hurwitz, B., Sinha, H., Robinson, B., & Feblowitz, M. (2000). WHAM. Supporting Mobile Workforce and Applications in Workflow Environments. Proceedings of 10th International Workshop on Research Issues in Data Engineering (RIDE), San Diego, California, USA, 2000, 31-38.
17. Kumar, M., & Newman, R. E. (2006). STRBAC - An Approach Towards Spatio-Temporal Role-Based Access Control. Proceedings of the Conference on Communication, Network, and Information Security (CNIS), 150-155.
18. Küpper, A. (2005). Location-based Services - Fundamentals and Operation. Wiley & Sons, Chichester, U.K.
19. Lampson, B. (1974). Protection. Operating Systems Review, 8(1), 18-24.
20. Mundt, T. (2006). Two Methods of Authenticated Positioning. Proceedings of the International Workshop on Quality of Service & Security for Wireless and Mobile Networks (Q2SWinet), Malaga, Spain, 25-32.
21. Oberweis, A. (2005): Person-to-Application Processes: Workflow Management. In Dumas, M., van der Aalst, W., & Hofstede, A. (Ed.), Process-Aware Information Systems. Bridging People and Software Through Process Technology, Wiley & Sons, Hoboken, New Jersey, USA, 21-36.
22. Peterson, J. L. (1977). Petri Nets. ACM Computing Surveys, 9(3), 223-252.
23. Ray, I., and Kumar, M. (2006). Towards a Location- based Mandatory Access Control Model. Computer & Security, 25(1), 36-44.
24. Ray, I., Kumar, M., & Yu, L. (2006). LRBAC: A Location-Aware Role-Based Access Control Model. Second International Conference on Information Systems Security (ICISS), Kolkata, India, 147-161.
25. Sandhu, R. (1991). Separation of Duties in Computerized Information Systems. Database Security IV: Status and Prospects, Halifax, U.K., 179-189.
26. Sastry, N., Shankar, U., & Wagner, D. (2003). Secure Verification of Location Claims. Proceedings of the Conference on Wireless Security (WiSe), San Diego, California, USA, 1-10.
27. Stormer, H., & Knorr, K. (2001). PDA- and Agent-based Execution of Workflow Tasks. Proceedings of Informatik 2001, Vienna, Austria, 968-973.
28. Wainer, J., Barthelmess, P., & Kumar, A. (2003). W-RBAC - A Workflow Security Model Incorporating Controlled Overriding of Constraints. International Journal of Cooperative Information Systems, 12(4), 455-485.