A Workflow Reference Monitor for Enforcing Purpose-Based Policies
dc.contributor.author | Jafari, Mohammad | en_US |
dc.contributor.author | Denzinger, Joerg | en_US |
dc.contributor.author | Safavi-Naini, Reihaneh | en_US |
dc.contributor.author | Barker, Ken | en_US |
dc.date.accessioned | 2013-09-25T16:20:35Z | |
dc.date.available | 2013-09-25T16:20:35Z | |
dc.date.issued | 2013-09-25 | |
dc.description.abstract | Purpose is a key concept in privacy policies. Based on the purpose framework developed in our earlier work [11] we present an access control model for a work ow-based information system in which a work ows reference monitor ( WfRM ) enforces purpose-based policies. We use a generic access control policy language and show how it can be connected to the purpose modal logic language ( PML ) to link purpose constraints to access control rules and how such policies can be enforced. We also present a simple implementation of such a reference monitor based on extending eXtensible Access Control Markup Language( XACML ), a commonly used access control open standard. | en_US |
dc.description.refereed | No | en_US |
dc.identifier.department | 2013-1046-13 | en_US |
dc.identifier.doi | http://dx.doi.org/10.11575/PRISM/30574 | |
dc.identifier.uri | http://hdl.handle.net/1880/49843 | |
dc.language.iso | eng | en_US |
dc.publisher.corporate | University of Calgary | en_US |
dc.publisher.faculty | Science | en_US |
dc.subject | Purpose | en_US |
dc.subject | Privacy | en_US |
dc.subject | Purpose-Based Policies | en_US |
dc.subject.other | Workflow Reference Monitor, XACML | en_US |
dc.title | A Workflow Reference Monitor for Enforcing Purpose-Based Policies | en_US |
dc.type | technical report | en_US |
thesis.degree.discipline | Computer Science | en_US |