Please use this identifier to cite or link to this item:
Title: Satisfiability and Feasibility in a Relationship-based Workflow Authorization Mode
Authors: Khan, Arif A
Issue Date: Sep-2012
Publisher: University of Calgary
Citation: Khan, A.K. (2012). Satisfiability and Feasibility in a Relationship-based Workflow Authorization Mode (Unpublished master's thesis). University of Calgary, Calgary, AB.
Abstract: A workflow authorization model is defined in the framework of Relationship-Based Access Control (ReBAC), in which the protection state is a social network. Armed with this model, a new decision problem called workflow feasibility is studied. The goal is to ensure that the space of protection states contains at least one member in which the workflow specification can be executed to completion. A sufficient condition is identified under which feasibility can be decided by a refutation procedure that is both sound and complete. A formal specification language, based on a monotonic fragment of the Propositional Dynamic Logic (PDL), is proposed for specifying protection state spaces. The adoption of this language renders workflow feasibility NP-complete in the general case but polynomial-time decidable for an important family of workflows. A model checker for this PDL-based language is implemented. Hybridization of this PDL-fragment is examined. Satisfiability and feasibility of workflows with XOR-patterns are analyzed as well.
Appears in Collections:University of Calgary Theses

Files in This Item:
File Description SizeFormat 
2012_Khan.pdf34.11 MBAdobe PDFView/Open

This item is licensed under a Creative Commons License Creative Commons