The application research of role-based access control model in workflow management system

Abstract

Access control between multi-user and multi-object is the key technique in security management of distributed workflow systems, and the mechanism of the role-based authorization and access control is an effective way to solve the problem. Both RBAC96 and NRBAC are better models of role-based access control. After introducing authorization constraints, a new model of role-based access control, ARBAC, is presented to mend the above models' shortcomings. After this, an example is given to explain the execution of the role assignment algorithm. Finally, ARBAC model is applied to workflow system architecture and the new architecture is also explained in this paper. In practice, the model ARBAC with the authorization mechanism is flexible, and it also simplifies the task complexity of security administrator. © Springer-Verlag 2004.