基于四级访问控制策略的工作流模型

Workflow Model Based on Four Level Access Control Strategy

针对用户-角色-权限的三级访问控制策略(RBAC 96)的缺陷以及工作流管理系统突出活动的特性,在传统的RBAC 96模型中引入活动、上下文和柔性角色解析等概念,提出了一种工作流管理系统中基于用户-角色-活动-权限的四级访问控制策略,提高了工作流管理系统的动态适应性、安全性和实用性。

As for the deficiency of Users-Roles-Permissions three level access control strategy and prominent activity speciality in workflow management system, concepts of activity, context and flexible role parsing are introduced. A four level access control strategy based on Users- Roles-Activity-Permissions is presented, it can enhance the dynamic adaptability, security and practicability of the workflow management system.