摘要
提出了一种工作流访问控制模型WACM(Workflow Access Control Model),该模型支持基于角色的授权,通过工作流引擎中的访问控制矩阵进行同步授权,采用Perti网来描述工作流,对工作流参考模型进行了定义和描述,分析了工作流访问控制模型WACM的体系结构,并将该模型应用到电子商务工作流中,建立了基于安全电子商务协议(SET)的访问控制模型。
Access control is an important protection mechanism for information systems. How to make access control in workflow system is presented. A new workflow access control model (WACM) is developed based on current several access control model. The model supports roles assignment and dynamic authorization according to the three-dimensional access control matrix in workflow engine. The workflow is defined and described using petri nets. The architecture of workflow access control model (WACM) is analyzed. An example of e-commerce workflow access control model is given in detail.
出处
《计算机工程与设计》
CSCD
2004年第12期2176-2178,共3页
Computer Engineering and Design
