Please use this identifier to cite or link to this item:
Type: Artigo de periódico
Title: DW-RBAC: A formal security model of delegation and revocation in workflow systems
Author: Wainer, J
Kumar, A
Barthelmess, P
Abstract: One reason workflow systems have been criticized as being inflexible is that they lack support for delegation. This paper shows how delegation can be introduced in a workflow system by extending the role-based access control (RBAC) model. The current RBAC model is a security mechanism to implement access control in organizations by allowing users to be assigned to roles and privileges to be associated with the roles. Thus, users can perform tasks based on the privileges possessed by their own role or roles they inherit by virtue of their organizational position. However, there is no easy way to handle delegations within this model. This paper tries to treat the issues surrounding delegation in workflow systems in a comprehensive way. We show how delegations can be incorporated into the RBAC model in a simple and straightforward manner. The new extended model is called RBAC with delegation in a workflow context (DW-RBAC). It allows for delegations to be specified from a user to another user, and later revoked when the delegation is no longer required. The implications of such specifications and their subsequent revocations are examined. Several formal definitions for assertion, acceptance, execution and revocation are provided, and proofs are given for the important properties of our delegation framework. (C) 2005 Elsevier B.V. All rights reserved.
Subject: workflow
access control
role-based access control
Country: Inglaterra
Editor: Pergamon-elsevier Science Ltd
Citation: Information Systems. Pergamon-elsevier Science Ltd, v. 32, n. 3, n. 365, n. 384, 2007.
Rights: fechado
Identifier DOI: 10.1016/
Date Issue: 2007
Appears in Collections:Unicamp - Artigos e Outros Documentos

Files in This Item:
File Description SizeFormat 
WOS000244019200001.pdf314.11 kBAdobe PDFView/Open

Items in DSpace are protected by copyright, with all rights reserved, unless otherwise indicated.