An organization-based access control model for workflow and dynamic constraints implementation

作者：Yang Weiqing^*; Liu Yongshan

来源：International Journal of Advancements in Computing Technology, 2012, 4(1): 477-484.

DOI：10.4156/ijact.vol4.issue1.54

• Access control models
• Authorization management
• Business Process
• Constraint relations
• Constraints
• Dynamic constraints
• Operating management
• Organization Unit
• Task-based access control
• Work-flow systems

Considering the significance of organization in enterprise operating management, an access control model supporting organization GT-RBAC (Group-Task-Role-Based Access Control) is put forward, in this model, roles are defined and authorized through organization, not only reducing the number of roles, but also lowering the complexity of the authorization management. Combined with the model proposed, based on the constraint relations between tasks during the execution of the business processes, a task-based access control algorithm is given. Finally, a case of new vehicles purchase application workflow in a large enterprise for Auto Sales is presented, checking that the model and algorithm are feasible.

• 出版日期2012