Research on Workflow Security Mode Based on PKI/PMI
XU Zhi-qi · Computer Knowledge and Technology · 2011
In consideration of simple workflow security model,there are some loopholes as simple authentication,inflexible authorization and absent audit.Based on the intensive research of existing technology of PKI/PMI and the security needs of workflow,an enhanced workflow security model is proposed.This model introduces strong factor authentication by utilizing PKI,TRBAC access control by utilizing PMI and by utilizing digital signature and DTS to ensure non repudiation and existing.It satisfies the needs of security audit.Comparing to simple workflow security model,practice shows this enhanced model improves the safety and flexibility significantly.It provides a reliable solution for Data Privacy,Data Integrity,data Availability and Non Repudiation.The risks from illegal and unauthorized operation are reduced greatly.