基于角色的工作流安全模型的研究与实现

Research and Realization of Workflow Safety Model Based on Role

随着计算机和互联网领域的迅速发展,现代信息系统的分布性、异构性和自治性的特征越来越显著,相应的信息资源也分布在异构的计算机环境中,信息源之间的连接表现出松散耦合的特点,在这种大规模分布式环境下对分布式工作流管理系统的权限管理也提出了更高要求。访问控制是工作流管理系统设计中的关键环节,是系统安全的重要保障,文中分析了基于群组改进的访问控制模型,通过把群组引入到工作流系统的权限管理系统,把各个不同的用户具有相同的角色集归为同一用户群组,对多个用户的授权压缩为对同一群组授权,减少了授权工作量,并给出了基于该模型的权限管理系统关键技术的具体实现。

With the rapid development in computer and network fields, the modem enterprise information systems have shown some new trend： the resources are deployed on a comptiter environment with different platforms, the connection between information resources are loosely. In such large-scale distributed environment, the permission management of workflow managing system calls for more security . Aocess control is a very key in design of workflow system, it is a important guarantee for system to run in safety. Through importing group, we can sort different users who own a same role into a group and award right into to this group instead of different users each, so it lessens the workload. This article analyses the model of the Role-Based Access Control which is improved based on Group, and imports it into administration of workflow system privilege, finally it presents a concrete implement of the key technology.