Chinese wall security model for workflow management systems with dynamic security policy

Yu Cheng Hsiao, Gwan Hwan Hwang

研究成果: 雜誌貢獻文章

3 引文 斯高帕斯(Scopus)

摘要

Secure workflow management systems (WfMSs) are required to support major security features such as authentication, confidentiality, data integrity, and nonrepudiation. The Chinese wall security model (CWSM) was designed to provide access controls that mitigate conflict of interest in commercial organizations, and is especially important for large-scale interenterprise workflow applications. This paper describes how to implement the CWSM in a WfMS. We first demonstrate situations in which an access control model is not sufficient for this if the WfMS does not keep the run-time history of data accesses and company information is mutable, and we then propose an application programming interface (API) to solve this problem, also providing support for the intrinsic dynamic access control mechanism defined in the CWSM (i.e., the dynamic binding of subjects and elements in the company data set). This API can also specify several requirements of the dynamic security policy that arise when applying the CWSM in WfMSs. Finally we discuss how to implement a run-time system to implement CWSM policies specified by this API in a WfMS.

原文英語
頁(從 - 到)417-440
頁數24
期刊Journal of Information Science and Engineering
29
發行號3
出版狀態已發佈 - 2013 五月 1

ASJC Scopus subject areas

  • Software
  • Human-Computer Interaction
  • Hardware and Architecture
  • Library and Information Sciences
  • Computational Theory and Mathematics

指紋 深入研究「Chinese wall security model for workflow management systems with dynamic security policy」主題。共同形成了獨特的指紋。

  • 引用此