An Oriented-Service Workflow Access Control Architecture

Workflow access control is an important issue in workflow security. Although there exist some standards for security of Web services and access control for services in distributed systems are well studied, there is a lack of comprehensive approach in access control for services, especially in workflow. In this paper we proposed an access control for Service-Oriented workflow system architecture. The main secure service in the architecture and the interactions of services in running stage were described of this architecture. Adopted security services and policy-driven security approaches, this architecture can decouple security logic from applications and guarantee interoperability and manageability of systems.