An Access Control Model with Task-State Sensitivity and Its CPN Simulation

您当前的位置：

首页 >

文章列表页 >

An Access Control Model with Task-State Sensitivity and Its CPN Simulation

更新时间：2025-07-09

- An Access Control Model with Task-State Sensitivity and Its CPN Simulation
- Vol. 46, Issue 12, Pages: 85-91(2012)
- 作者机构：
  
  1. 浙江科技学院信息学院,杭州,310023
  2. 华南理工大学计算机科学与工程学院,广州,510006
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP309
- Online First：10 December 2012，
  
  Published：2012
- 稿件说明：
移动端阅览
An Access Control Model with Task-State Sensitivity and Its CPN Simulation[J]. 2012, 46(12): 85-91.
DOI：

An Access Control Model with Task-State Sensitivity and Its CPN Simulation[J]. 2012, 46(12): 85-91. DOI：

摘要

针对现有主动访问控制模型中授权流与工作流同步粒度不够精细的问题

提出一种任务状态敏感的访问控制模型.根据任务实例的不同状态对多个执行角色进行差异化授权

施加相应的职责分离约束

并给出一种有色网仿真分析方法.概念模型可以优化工作流中的数据利用

充分增强业务中的角色协作.仿真分析方法可跟踪工作流执行时的安全状态

并发现潜在的死锁问题.通过一个软件工作流验证了其协作与访问控制概念的可行性及其分析方法的有效性.

Abstract

An access control model with task-state sensitivity is proposed to address the issue that the synchronizing granularity of authorization-flow and workflow is not fine enough in existing active access control models. Differentiated permissions are authorized to multiple roles under different states of a task instance

and a duty separation constraint is enforced. A colored Petri net simulation technique is provided and used as an analysis method. A concept model is used to optimize the data utilization in workflows; and the roles collaboration in business is fully enhanced. The simulation technique is utilized to track run-time safety states of a workflow

and to find out potential deadlocks. Feasibility of the collaboration and access control concept and the effectiveness of the analysis method are verified via a software workflow.

关键词

Keywords

references

ATLURI V, HUANG Weikuang. An authorization model for workflows [C]∥Proceedings of the 5th European Symposium on Research in Computer Security. Berlin, Germany: Springer-Verlag, 1996:44-64.

ATLURI V, HUANG Weikuang. Petri net based safety analysis of workflow authorization models [J]. Journal of Computer Security, 2000, 8(2/3):209-240.

翟治年,奚建清,卢亚辉,等. 主动授权管理中的关联继承机制[J]. 西安交通大学学报, 2012, 46(4):24-31.

ZHAI Zhinian, XI Jianqing, LU Yahui, et al. Association inheritance mechanism in active authorization management [J]. Journal of Xi'an Jiaotong University,2012, 46(4): 24-31.

WFMC-TC00-1003 Workflow reference model [S]. Cohasset, MA, USA:Workflow Management Coalition, 1995.

DONG Xin, CHEN Gang, YIN Jianwei, et al. Petri-net-based context-related access control in workflow environment [C]∥Proceedings of the International Conference on Computer Supported Cooperative Work. Piscataway, NJ, USA: IEEE CS, 2002:381-384.

ZHANG Yi, ZHANG Yong, WANG Weinong. Modeling and analyzing of workflow authorization management [J]. Journal of Network System Management, 2004, 12(4): 507-535.

KNORR K. Dynamic access control through Petri net workflows [C]∥Proceedings of the 16th Annual Computer Security Applications Conference. Piscataway, NJ, USA: IEEE CS, 2000:159-167.

LU Yahui, ZHANG Li, SUN Jiaguang. Using colored Petri nets to model and analyze workflow with separation of duty constraints [J]. International Journal of Advanced Manufacturing Technology, 2009, 40(1):179-192.

卢亚辉. 工作流系统的访问控制模型及其安全性分析的研究[D]. 北京: 清华大学, 2008.

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Association Inheritance Mechanism in Active Authorization Management

Feature-Based Framework of Process Planning Integrated with Numeric Control Operations

Process Evolution Based on Change Domains

Design and Validation of Universal Access Control Signaling Protocol Based on Next Steps in Signaling

An Attribute-Constraints-Oriented Automated Trust Negotiation Model

Related Author

韦凯 1

郭玉彬 3

汤德佑 1

卢亚辉 2

奚建清 1

屈满仓 2

李俊民 2

张英杰 1

Related Institution

School of Computer Science and Engineering, South China University of Technology

School of Mechanical Engineering, Xi'an Jiaotong University

School of Electronics and Information Engineering, Xi'an Jiaotong University

College of Software and Microelectronics, Northwestern Polytechnical University

State Engineering Research Center of Software, Northeastern University

⁰