摘要
以传统Petri网理论为基础进行形式化描述其控制流.并结合基于角色任务的访问控制(RTBAC),通过扩展了时间特性以及颜色特性的Petri网进行更准确、形象的描述其工作流授权模型.该模型实现了访问控制授权流与工作流的同步,满足了公文审批业务工作流"面向任务"的访问控制要求;引入时间概念,使访问控制的授权约束与时间有关,从而满足审批业务工作流中任务的时效性要求,该模型还包含了其它安全约束如SOD(职责分离)以及角色层次关系结构等概念.最后,对所建模型进行了正确性验证.
The control-flow was formally described based on the traditional Petri-net theory.Combining with RTBAC,the model authorized by the control-flow was accurately and imaginarily described through Petri-net that has expanded the character of time and color.The model has realized the synchronization of authorization flow of access control with workflow,meeting the request of task-based access control of examination and approval of business workflow.By introducing conceptual time,the authorization of access contr...
出处
《贵州科学》
2008年第3期20-23,37,共5页
Guizhou Science
