Research on Workflow Access Control Temporal Policy Combine in Multi-domains
多域环境下工作流访问控制时序策略组合研究

In multi-domains environment, workflow access control policy is consisted of heterogeneous temporal policies in difference autonomic domains,and its requirement is special subjects can access special objects in perodic time or duration time. While XACML specifics policy combine, it does not contains temporal constraint. Based on the kinds of temporal constraint proposed by UTRBAC, this paper defined temporal constraints policies and illustrated by figures. It is extended from XACML by introducing correspond temporal constriant elements. Finally, this paper illustrated that the extended XACML can describe heterogeneous temporal policy combine conveniently through a example.