An access control model with high security for distributed workflow and real-time application

Ruo-Fei Han; Hou-Xiang Wang

doi:10.1117/12.742835

19 November 2007 An access control model with high security for distributed workflow and real-time application

Ruo-Fei Han, Hou-Xiang Wang

Proceedings Volume 6784, Network Architectures, Management, and Applications V; 67843E (2007) https://doi.org/10.1117/12.742835
Event: Asia-Pacific Optical Communications, 2007, Wuhan, China

Abstract

The traditional mandatory access control policy (MAC) is regarded as a policy with strict regulation and poor flexibility. The security policy of MAC is so compelling that few information systems would adopt it at the cost of facility, except some particular cases with high security requirement as military or government application. However, with the increasing requirement for flexibility, even some access control systems in military application have switched to role-based access control (RBAC) which is well known as flexible. Though RBAC can meet the demands for flexibility but it is weak in dynamic authorization and consequently can not fit well in the workflow management systems. The task-role-based access control (T-RBAC) is then introduced to solve the problem. It combines both the advantages of RBAC and task-based access control (TBAC) which uses task to manage permissions dynamically. To satisfy the requirement of system which is distributed, well defined with workflow process and critically for time accuracy, this paper will analyze the spirit of MAC, introduce it into the improved T&RBAC model which is based on T-RBAC. At last, a conceptual task-role-based access control model with high security for distributed workflow and real-time application (A_T&RBAC) is built, and its performance is simply analyzed.

Citation Download Citation

Ruo-Fei Han and Hou-Xiang Wang "An access control model with high security for distributed workflow and real-time application", Proc. SPIE 6784, Network Architectures, Management, and Applications V, 67843E (19 November 2007); https://doi.org/10.1117/12.742835

ACCESS THE FULL ARTICLE

INSTITUTIONAL
Select your institution to access the SPIE Digital Library.

SELECT YOUR INSTITUTION

PERSONAL
Sign in with your SPIE account to access your personal subscriptions or to use specific features such as save to my library, sign up for alerts, save searches, etc.

PERSONAL SIGN IN

No SPIE Account? Create one

PURCHASE THIS CONTENT

SUBSCRIBE TO DIGITAL LIBRARY

50 downloads per 1-year subscription

Members: $195

Non-members: $335 ADD TO CART

25 downloads per 1 - year subscription

Members: $145

Non-members: $250 ADD TO CART

PURCHASE SINGLE ARTICLE

Includes PDF, HTML & Video, when available