A Policy-based Access Control Key Technology Research On Flexible Workflow System

The workflow access control is an important issue to improve its information security. This paper investigates the current RBAC & TBAC model workflow access control application, summarizes workflow access control requirement main points and analyzes current model shortcomings, proposes a policy based workflow access control modeling and agent enforcement mechanism that defines the policy rules based on workflow tasks in workflow design time and dynamically enforces the security policy during workflow run-time, the model can realize task instance-based workflow access control. This paper gives a formal specification of the workflow dynamic access control model and enforcement architecture, that can support flexible authorization policy definition and enforcement to better satisfy workflow system access control requirement. Also, this paper gives a detail design in database and system realization of the prototype system to prove its practicality.