.png){kind=icon}
返回
Delegation Security Analysis in Workflow Systems
.png){kind=icon}
PRE
AI
DOI：10.1109/TDSC.2023.3248602.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
User delegation is a type of access control mechanisms that allow a person to delegate all or part of his / her authorities to others. It is an important access control policy that can significantly improve workflow flexibility. A crucial requirement after delegations is to check the satisfiability of workflow, i.e., determining whether there exists a valid execution schedule (ES) in the workflow that can ensure it to proceed from the beginning to the end while satisfying all authorization constraints. Existing works perform in a centralized manner to find such a valid ES by exploring all ESs. Unfortunately, the enumeration of ESs is highly inefficient from the perspective of computational complexity. This study proposes a novel approach to overcoming this difficulty in a distributed way. First, we use Petri nets (PNs) to formalize workflow and user delegations. Then, we directly specify a conflict-free workflow that satisfies all authorization constraints. Hence, determining the satisfiability of a workflow amounts to directly checking the existence of ESs in the corresponding conflict-free workflow. Finally, we present a distributed strategy, which is of polynomial complexity, to determine the existence of ESs.
Keyword:
Authorization
Indexes
Contracts
Schedules
Petri nets
Computational complexity
Process control
Distributed control
separation of duty constraint
user delegation
workflow processes
期刊
IF:
7.5
论文数:
2.4K
被引数:
9.6K
机构
引用论文
Picea wilsonii Transcription Factor PwNAC38 Promotes Drought and Salt Tolerance in Transgenic Arabidopsis and Apple Calli.png)
Forests
OAAI
ForestsIF0
OAAI分享收藏
分享收藏分享收藏Genome-Wide Identification of bHLH Transcription Factor in Medicago sativa in Response to Cold StressGenesOAAI
GenesIF0
OAAI分享收藏
查看更多内容