Task-based authorization contrls (TBAC): a family of models for active and nterprise-oriented authorization management

摘要

In this paper,we develop a new paradigm for access contrl and authorization management,vcalled task-based authorization ocntorls (TBAC).TBAC models acess ocntrols from a task-oriented perspective than the traditional subject-object one.Access mediation now involves authorizatios at various points during the ocmpletion of tasks in accordance with some aplication logic.By taking a taskoriented view of access control and authorizations,TBAC lays the foundation for research into a new breed of "active" security models that are reuired for agent based distributed compouting and workflow management.