Access control in document-centric workflow systems - An agent-based approach

被引：17

作者：

Botha, RA ^{[1
]}

Eloff, JHP

机构：

[1] Port Elizabeth Technikon, Fac Comp Studies, Port Elizabeth, South Africa

[2] Rand Afrikaans Univ, Dept Comp Sci, Johannesburg, South Africa

来源：

COMPUTERS & SECURITY | 2001年 / 20卷 / 06期

关键词：

Access control - Context sensitive access control - Document-centric workflow systems;

D O I：

10.1016/S0167-4048(01)00613-7

中图分类号：

TP [自动化技术、计算机技术];

学科分类号：

0812 ;

摘要：

Workflow Systems are increasingly being used to streamline organizations' business processes. During the execution of business processes, information often traverses organizations' networks as documents. With the proliferation of the Internet, documents travel across open networks. These documents can, however, contain potentially sensitive information. The documents used in Workflow Systems must therefore be protected from unauthorized access. This paper enumerates three access control requirements of workflow environments, including the well-known principle of separation of duty. Thereafter the CSAC (Context-sensitive Access Control) model is presented to address the requirements. In conclusion it is demonstrated how this model can be implemented in an agent-based architecture.

引用

页码：525 / 532

页数：8