• DocumentCode
    2822680
  • Title

    Dynamic access control through Petri net workflows

  • Author

    Knorr, Konstantin

  • Author_Institution
    Dept. of Inf. Technol., Zurich Univ., Switzerland
  • fYear
    2000
  • fDate
    36861
  • Firstpage
    159
  • Lastpage
    167
  • Abstract
    Access control is an important protection mechanism for information systems. An access control matrix grants subjects privileges to objects. Today, access control matrices are static they rarely change over time. This paper shows how to make access control matrices dynamic by means of workflows. Access rights are granted according to the state of the workflow. By this practice the risk of data misuse is decreased which is proven through an equation given in the paper. The concept of workflow is defined by Petri nets which offer a solid mathematical foundation and are well suited to represent discrete models such as workflows
  • Keywords
    Petri nets; authorisation; information systems; workflow management software; Petri net workflows; access control matrix; data misuse; dynamic access control; information systems; privileges; protection mechanism; Access control; Authorization; Equations; Information systems; Information technology; Mathematical model; Permission; Petri nets; Protection; Solid modeling;
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Computer Security Applications, 2000. ACSAC '00. 16th Annual Conference
  • Conference_Location
    New Orleans, LA
  • Print_ISBN
    0-7695-0859-6
  • Type

    conf

  • DOI
    10.1109/ACSAC.2000.898869
  • Filename
    898869