Geodesic
Context-sensitive Access Control Model for Business Processes
Computer Science and Information Systems, Tome 10 (2013) no. 3.

Voir la notice de l'article provenant de la source Computer Science and Information Systems website

This paper focuses on problems of access control for business processes. The subject of the paper is a specification of the Contextsensitive access control model for business processes (COBAC). In order to efficiently define and enforce access control for different business processes, the COBAC model is based on the RBAC (Role-based Access Control) model which is extended with the following entities: context, business process, activity and resource category. By using a context-sensitive access control it is possible to define more complex access control policies whose implementation by existing access control models for business processes is not possible or is very complicated. The COBAC’s context model can describe rich context information and can be easily extended for specific cases. The introduction of business process and activity entities has facilitated the definition of access control policies for business processes. The categorization of resources enables the definition of access control policies for whole resource categories, and thus, potentially, reduces the number of policies which need to be defined. The COBAC model is applicable in different business information systems, and supports the definition of access control policies for both simple and complex business processes. The model is verified by a case study on a real business process.
Keywords: access control, RBAC, context-sensitive, workflow, business process 
@article{CSIS_2013_10_3_a3,
     author = {Goran Sladi\'c and Branko Milosavljevi\'c and Zora Konjovi\'c},
     title = {Context-sensitive {Access} {Control} {Model} for {Business} {Processes}},
     journal = {Computer Science and Information Systems},
     publisher = {mathdoc},
     volume = {10},
     number = {3},
     year = {2013},
     url = {http://geodesic.mathdoc.fr/item/CSIS_2013_10_3_a3/}
}
TY  - JOUR
AU  - Goran Sladić
AU  - Branko Milosavljević
AU  - Zora Konjović
TI  - Context-sensitive Access Control Model for Business Processes
JO  - Computer Science and Information Systems
PY  - 2013
VL  - 10
IS  - 3
PB  - mathdoc
UR  - http://geodesic.mathdoc.fr/item/CSIS_2013_10_3_a3/
ID  - CSIS_2013_10_3_a3
ER  - 
%0 Journal Article
%A Goran Sladić
%A Branko Milosavljević
%A Zora Konjović
%T Context-sensitive Access Control Model for Business Processes
%J Computer Science and Information Systems
%D 2013
%V 10
%N 3
%I mathdoc
%U http://geodesic.mathdoc.fr/item/CSIS_2013_10_3_a3/
%F CSIS_2013_10_3_a3
Goran Sladić; Branko Milosavljević; Zora Konjović. Context-sensitive Access Control Model for Business Processes. Computer Science and Information Systems, Tome 10 (2013) no. 3. http://geodesic.mathdoc.fr/item/CSIS_2013_10_3_a3/