An Improved Role-Based Workflow Access Control Model

Abstract

The Role-Based Access Control (RBAC) model is widely accepted as the model of access control of workflow management system (WFMS).However, the RBAC model exist a lot of limit when it describe the authorization constraint of access control. Especially , the RBAC model cannot express the transaction character and the phase authorization constraint when the role and the user perform the task. This paper proposed an improved role-Based access control model for WFMS. The new authorization concepts for WfMS are defined respectively. The access control rules of IRBAC model are build, which can express complex access control constraints for WfMS.