Study On The Access Control In Workflow Management System

Access control play important role in workflow security services, and theresearch work of this is greatly emphasized in recent years. This paper presents the traditional access control technologies inworkflow management system. Based on the research, we bring forward thePCBAC(Coloured Petri Net and Constraint Based Access Control) workflowmanagement model. The conception of coloured Petri net is introduced intothe model, workflow data is presented in the access control model, and theconception of business rule is also introduced into the workflow process, thisorganization security rule has been successfully implemented in the modelsuch as Least Privilege and Separation of Duty(SoD).In this paper, the prototype of Organization Manager, Right Manager andAccess Control Definer is designed and implemented in client, and theResource Services, User Services and Authorization Services is designed andimplemented in server. This paper also provides the main function, designmodule, detailed algorithms and data structure.This paper also introduces the application of the access control model inthe environment of "Course of System of Tsinghua MSE".