Extension of access control policy in secure role-based workflow model

摘要

Development of Task Based Access Control models have been recently progressing in workflow management systems. This paper describes the extension of the well-known secure role-based workflow model (RBWM) which allows flexible management of permissions to system objects through tasks. Nonetheless, RBWM does not address the issues of versioning of securable objects and dependence on the state of linked objects. Here we suggest addressing these problems with access control policies. We propose extension of security policy by additional set of permissions, schemes and algorithms allowing simultaneous execution of these policies. The research covers the implementation of this model in a running system and comparison with existing approaches.