Dynamic Access Control Based on the State of Workflow

Access control is an important protection mechanism for information systems Access control enforces subjects access restrictions to objects Legitimate users should be allowed to access data items and illegitimate users should be detained from data access An access control matrix grants subjects access rights to objects In this paper the problem of access control on the executions of workflows are discussed A dynamic access control mechanism based on the state of workflows is proposed The specification of workflows by Petri nets is also given Based on the formal specification, it is proven that by using this dynamic access control the risk of data misuse is decreased