Petri-net-based Context-related Access Control in Workflow Environment

Access control, which is one of the most important aspects of securiiy services, is becoming increasingly an important challenge in workfow management systems. However, the traditional models of access control such as Role-based Access Control (RBAC) are static models without recognition of the dynamic environments in which the workfows are rooted These context-independent models rarely can meet the requirements thai the highly &namic environments raise. In this paper, we regard authorization as a dynamic process instead of the traditional static view and take hvo contextual factors into account: i) the state of related authorization processes; ii) the state of related process instances. Then, we propose a Petri-net-based model as a practical solution to the context-sensitive access control on this basis. 1