多维角色和任务的工作流访问控制模型

A access control model of workflow based on multi-role and task

工作流系统中的安全访问控制技术已被予以很大的关注。本文在基于任务和角色的访问控制模型上提出了基于多维角色和任务的MR&TBAC模型。通过基于角色的静态授权和基于任务的动态授权加强了工作流系统访问控制的安全性。该模型解决了传统的访问控制模型的缺陷,提出了一种新的角色模型方便管理一定数量的角色,提高了分布式工作流系统的安全性和实用性。

Access control is a vitally important component in the security of workflow system recently.In this paper a new multi-roles access control model is proposed based on the traditional RBAC and TBAC model.It used the method of static authorization based on role and dynamic authorization based on task to ensure the access safety of the workflow system.The model overcomes the weaknesses of the traditional access control model and proposes a new role model which can manage a number of roles more convenient,beside...