An approach for flexible RBAC workflow system

With the fast increase of electronic commerce, more and more enterprises and organizations are facilitating their business processes by workflow. To protect information secure and meet the requirement of frequent business changes over time, the security and flexibility become two of the most important aspects that attract attention both from academy and industry. Many related research work on flexible workflow and secure RBAC model were presented respectively. Unfortunately, the analysis and implementation of enforcing RBAC into Web-based flexible workflow have not been mentioned The intention of this paper is to extend RBAC framework further to flexible workflow to support the security, flexibility and expansibility of organization business. A model and its corresponding mechanism are introduced for establishment, dynamical customization and run-time management of the RBAC workflow. A practical system for Property Right Exchange (PRES) based on this model is implemented.