Verification duty policy for task-role-based workflow systems

Abstract

A broad literature review presents great interests about theoretical specification or various formalizations on the constraints of Separation of Duty (SoD) Policy, which can improve Role-Based Access Control (RBAC). To gain the flexible and specific access control of information exchange within the enterprise environment, the proposed verification algorithm can check whether or not the Task-Role-Based Access Control (TRBAC) state can be satisfied with an assigned type of SoD policy, according to different given role-task and user-role assignments.