The Research on TBAC-based Access Control of BPEL
基于TBAC的BPEL访问控制技术研究

Business Process Execution Language for Web Services is a language,which can be used to define abstract and executable processes.However,the security aspect of access control is explicitly mentioned to be outside the scope of BPEL.This paper focuses on the implement of access control in the BPEL-based processes.We extend the existing Task-Based Access Control model,modify the definition of authorization unit and redefine the types of authorization units.Moreover we implement the mapping from the process defined by BPEL to TBAC model,put forwards an approach of using TBAC in BPEL.The future work is mentioned at the end of the paper.