Title :
Dynamic access control through Petri net workflows
Author :
Knorr, Konstantin
Author_Institution :
Dept. of Inf. Technol., Zurich Univ., Switzerland
Abstract :
Access control is an important protection mechanism for information systems. An access control matrix grants subjects privileges to objects. Today, access control matrices are static they rarely change over time. This paper shows how to make access control matrices dynamic by means of workflows. Access rights are granted according to the state of the workflow. By this practice the risk of data misuse is decreased which is proven through an equation given in the paper. The concept of workflow is defined by Petri nets which offer a solid mathematical foundation and are well suited to represent discrete models such as workflows
Keywords :
Petri nets; authorisation; information systems; workflow management software; Petri net workflows; access control matrix; data misuse; dynamic access control; information systems; privileges; protection mechanism; Access control; Authorization; Equations; Information systems; Information technology; Mathematical model; Permission; Petri nets; Protection; Solid modeling;
Conference_Titel :
Computer Security Applications, 2000. ACSAC '00. 16th Annual Conference
Conference_Location :
New Orleans, LA
Print_ISBN :
0-7695-0859-6
DOI :
10.1109/ACSAC.2000.898869
