{"id":"https://openalex.org/W1840655788","doi":"https://doi.org/10.1109/csfw.2004.22","title":"The Consistency of Task-Based Authorization Constraints in Workflow Systems","display_name":"The Consistency of Task-Based Authorization Constraints in Workflow Systems","publication_year":2004,"publication_date":"2004-06-28","ids":{"openalex":"https://openalex.org/W1840655788","doi":"https://doi.org/10.1109/csfw.2004.22","mag":"1840655788"},"language":"en","primary_location":{"id":"pmh:oai:CiteSeerX.psu:10.1.1.120.7020","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.120.7020","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www-faculty.cs.uiuc.edu/~cgunter/dist/TanCG04.pdf","raw_type":"text"},"type":"article","indexed_in":[],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5066349627","display_name":"Kaijun Tan","orcid":null},"institutions":[{"id":"https://openalex.org/I36788626","display_name":"California University of Pennsylvania","ror":"https://ror.org/01spssf70","country_code":"US","type":"education","lineage":["https://openalex.org/I36788626"]},{"id":"https://openalex.org/I79576946","display_name":"University of Pennsylvania","ror":"https://ror.org/00b30xv10","country_code":"US","type":"education","lineage":["https://openalex.org/I79576946"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kaijun Tan","raw_affiliation_strings":["#N#               * University of Pennsylvania"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"#N#               * University of Pennsylvania","institution_ids":["https://openalex.org/I36788626","https://openalex.org/I79576946"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109050799","display_name":"Jason Crampton","orcid":"https://orcid.org/0000-0003-2151-8426"},"institutions":[{"id":"https://openalex.org/I4210160447","display_name":"Universidad de Londres","ror":"https://ror.org/054v4yq51","country_code":"MX","type":"education","lineage":["https://openalex.org/I4210160447"]}],"countries":["MX"],"is_corresponding":false,"raw_author_name":"Jason Crampton","raw_affiliation_strings":["University of London"],"raw_orcid":"https://orcid.org/0000-0003-2151-8426","affiliations":[{"raw_affiliation_string":"University of London","institution_ids":["https://openalex.org/I4210160447"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5031954035","display_name":"Carl A. Gunter","orcid":"https://orcid.org/0009-0006-6943-0684"},"institutions":[{"id":"https://openalex.org/I36788626","display_name":"California University of Pennsylvania","ror":"https://ror.org/01spssf70","country_code":"US","type":"education","lineage":["https://openalex.org/I36788626"]},{"id":"https://openalex.org/I79576946","display_name":"University of Pennsylvania","ror":"https://ror.org/00b30xv10","country_code":"US","type":"education","lineage":["https://openalex.org/I79576946"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Carl A. Gunter","raw_affiliation_strings":["#N#               * University of Pennsylvania"],"raw_orcid":"https://orcid.org/0009-0006-6943-0684","affiliations":[{"raw_affiliation_string":"#N#               * University of Pennsylvania","institution_ids":["https://openalex.org/I36788626","https://openalex.org/I79576946"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":20.3443,"has_fulltext":false,"cited_by_count":83,"citation_normalized_percentile":{"value":0.99059948,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"17","issue":null,"first_page":"155","last_page":"169"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},"topics":[{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10703","display_name":"Business Process Modeling and Analysis","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1404","display_name":"Management Information Systems"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8103160858154297},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.7974163293838501},{"id":"https://openalex.org/keywords/workflow-management-system","display_name":"Workflow management system","score":0.7142725586891174},{"id":"https://openalex.org/keywords/workflow-technology","display_name":"Workflow technology","score":0.6780626177787781},{"id":"https://openalex.org/keywords/workflow-engine","display_name":"Workflow engine","score":0.6538930535316467},{"id":"https://openalex.org/keywords/role-based-access-control","display_name":"Role-based access control","score":0.5577726364135742},{"id":"https://openalex.org/keywords/access-control","display_name":"Access control","score":0.5291730761528015},{"id":"https://openalex.org/keywords/separation-of-duties","display_name":"Separation of duties","score":0.4999063014984131},{"id":"https://openalex.org/keywords/schema","display_name":"Schema (genetic algorithms)","score":0.47500598430633545},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.44852086901664734},{"id":"https://openalex.org/keywords/business-process","display_name":"Business process","score":0.4139259159564972},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.3914186656475067},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.35203516483306885},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.32377880811691284},{"id":"https://openalex.org/keywords/information-retrieval","display_name":"Information retrieval","score":0.1397397220134735},{"id":"https://openalex.org/keywords/work-in-process","display_name":"Work in process","score":0.12226471304893494}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8103160858154297},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.7974163293838501},{"id":"https://openalex.org/C140824633","wikidata":"https://www.wikidata.org/wiki/Q2808660","display_name":"Workflow management system","level":3,"score":0.7142725586891174},{"id":"https://openalex.org/C19612761","wikidata":"https://www.wikidata.org/wiki/Q8034836","display_name":"Workflow technology","level":3,"score":0.6780626177787781},{"id":"https://openalex.org/C188220564","wikidata":"https://www.wikidata.org/wiki/Q3325097","display_name":"Workflow engine","level":3,"score":0.6538930535316467},{"id":"https://openalex.org/C45567728","wikidata":"https://www.wikidata.org/wiki/Q1702839","display_name":"Role-based access control","level":3,"score":0.5577726364135742},{"id":"https://openalex.org/C527821871","wikidata":"https://www.wikidata.org/wiki/Q228502","display_name":"Access control","level":2,"score":0.5291730761528015},{"id":"https://openalex.org/C100587491","wikidata":"https://www.wikidata.org/wiki/Q1474665","display_name":"Separation of duties","level":4,"score":0.4999063014984131},{"id":"https://openalex.org/C52146309","wikidata":"https://www.wikidata.org/wiki/Q7431116","display_name":"Schema (genetic algorithms)","level":2,"score":0.47500598430633545},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.44852086901664734},{"id":"https://openalex.org/C85345410","wikidata":"https://www.wikidata.org/wiki/Q851587","display_name":"Business process","level":3,"score":0.4139259159564972},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.3914186656475067},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35203516483306885},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.32377880811691284},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.1397397220134735},{"id":"https://openalex.org/C174998907","wikidata":"https://www.wikidata.org/wiki/Q357662","display_name":"Work in process","level":2,"score":0.12226471304893494},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:CiteSeerX.psu:10.1.1.120.7020","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.120.7020","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www-faculty.cs.uiuc.edu/~cgunter/dist/TanCG04.pdf","raw_type":"text"},{"id":"mag:1840655788","is_oa":false,"landing_page_url":"https://dblp.uni-trier.de/db/conf/csfw/csfw2004.html#TanCG04","pdf_url":null,"source":{"id":"https://openalex.org/S4306418592","display_name":"IEEE Computer Security Foundations Symposium","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":"IEEE Computer Security Foundations Symposium","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.6600000262260437}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":18,"referenced_works":["https://openalex.org/W1503568870","https://openalex.org/W1538129883","https://openalex.org/W1639227833","https://openalex.org/W1979711649","https://openalex.org/W1996983098","https://openalex.org/W2015234709","https://openalex.org/W2021079739","https://openalex.org/W2024211312","https://openalex.org/W2026913455","https://openalex.org/W2038953226","https://openalex.org/W2054245586","https://openalex.org/W2100245805","https://openalex.org/W2134167896","https://openalex.org/W2145857528","https://openalex.org/W2162171351","https://openalex.org/W2163283609","https://openalex.org/W2166602595","https://openalex.org/W3145128584"],"related_works":["https://openalex.org/W2038953226","https://openalex.org/W2166602595","https://openalex.org/W2145857528","https://openalex.org/W2021079739","https://openalex.org/W1998833362","https://openalex.org/W1518234761","https://openalex.org/W2124080036","https://openalex.org/W2057028717","https://openalex.org/W2026913455","https://openalex.org/W2145070944","https://openalex.org/W2101266455","https://openalex.org/W1570154167","https://openalex.org/W2103317919","https://openalex.org/W2092874485","https://openalex.org/W1639227833","https://openalex.org/W2154765153","https://openalex.org/W2054600748","https://openalex.org/W74620132","https://openalex.org/W2031606427","https://openalex.org/W1982001619"],"abstract_inverted_index":{"Workflow":[0],"management":[1],"systems":[2,145],"(WFMSs)":[3],"have":[4,130],"attracted":[5],"a":[6,21,140,167,172,194,212],"lot":[7],"of":[8,20,23,38,86,92,113,120,154,159,166,171,190],"interest":[9],"both":[10],"in":[11],"academia":[12],"and":[13,55,68,79,99,149,157,170,184],"the":[14,36,69,90,111,121,164,188],"business":[15,31],"community.":[16],"A":[17,72],"workflow":[18,70,73,122,144,168,174,197,220],"consists":[19],"collection":[22],"tasks":[24,67],"that":[25,146,192,200],"are":[26,60,209],"organized":[27],"to":[28,44,50,53,108,181,211],"facilitate":[29],"some":[30],"process":[32],"specification.":[33],"To":[34],"simplify":[35],"complexity":[37],"security":[39,58,93],"administration,":[40],"it":[41],"is":[42,105,180,215],"common":[43],"use":[45],"role-based":[46],"access":[47],"control":[48],"(RBAC)":[49],"grant":[51],"authorization":[52,175,198],"roles":[54],"users.":[56],"Typically,":[57],"policies":[59,94],"expressed":[61],"as":[62],"constraints":[63,115,156,191],"on":[64],"users,":[65],"roles,":[66],"itself.":[71],"system":[74],"can":[75],"become":[76],"very":[77,97,102],"complex":[78],"involve":[80],"several":[81],"organizations":[82],"or":[83,205,225],"different":[84],"units":[85],"an":[87],"organization,":[88],"thus":[89],"number":[91],"may":[95],"be":[96],"large":[98],"their":[100],"interactions":[101],"complex.":[103],"It":[104],"clearly":[106],"important":[107],"know":[109],"whether":[110],"existence":[112],"such":[114],"will":[116],"prevent":[117],"certain":[118],"instances":[119],"from":[123],"completing.":[124],"Unfortunately,":[125],"no":[126],"existing":[127],"constraint":[128],"models":[129],"considered":[131],"this":[132,136,223,226,229],"problem":[133],"satisfactorily.":[134],"In":[135],"paper":[137],"we":[138],"define":[139,163],"model":[141],"for":[142,187,202],"constrained":[143,173,196],"includes":[147],"local":[148],"global":[150],"cardinality":[151],"constraints,":[152],"separation":[153],"duty":[155,160],"binding":[158],"constraints.":[161],"We":[162],"notion":[165],"specification":[169],"schema.":[176],"Our":[177],"main":[178],"result":[179],"establish":[182],"necessary":[183],"sufficient":[185],"conditions":[186],"set":[189],"ensure":[193],"sound":[195],"schema,":[199],"is,":[201],"any":[203,206],"user":[204,224],"role":[207,227],"who":[208],"authorized":[210],"task,":[213],"there":[214],"at":[216],"least":[217],"one":[218],"complete":[219],"instance":[221],"when":[222],"executes":[228],"task.":[230],"1":[231]},"counts_by_year":[{"year":2020,"cited_by_count":1},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":1},{"year":2017,"cited_by_count":1},{"year":2016,"cited_by_count":5},{"year":2015,"cited_by_count":3},{"year":2014,"cited_by_count":3},{"year":2013,"cited_by_count":9},{"year":2012,"cited_by_count":13}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}