DocumentCode
2822680
Title
Dynamic access control through Petri net workflows
Author
Knorr, Konstantin
Author_Institution
Dept. of Inf. Technol., Zurich Univ., Switzerland
fYear
2000
fDate
36861
Firstpage
159
Lastpage
167
Abstract
Access control is an important protection mechanism for information systems. An access control matrix grants subjects privileges to objects. Today, access control matrices are static they rarely change over time. This paper shows how to make access control matrices dynamic by means of workflows. Access rights are granted according to the state of the workflow. By this practice the risk of data misuse is decreased which is proven through an equation given in the paper. The concept of workflow is defined by Petri nets which offer a solid mathematical foundation and are well suited to represent discrete models such as workflows
Keywords
Petri nets; authorisation; information systems; workflow management software; Petri net workflows; access control matrix; data misuse; dynamic access control; information systems; privileges; protection mechanism; Access control; Authorization; Equations; Information systems; Information technology; Mathematical model; Permission; Petri nets; Protection; Solid modeling;
fLanguage
English
Publisher
ieee
Conference_Titel
Computer Security Applications, 2000. ACSAC '00. 16th Annual Conference
Conference_Location
New Orleans, LA
Print_ISBN
0-7695-0859-6
Type
conf
DOI
10.1109/ACSAC.2000.898869
Filename
898869
Link To Document