一种扩展的基于角色的工作流访问控制模型

A ROLE BASED EXTENDED CONTROL MODEL FOR WORKFLOW ACCESS

提出了一个扩展的基于角色工作流访问控制模型E-WACM(Extended Workflow Access Control Model Based on Role)。该模型提供细粒度的授权控制,使授权更为灵活,更符合工作流过程的需要,加入的时间参数使授权过程与工作流过程相互协调,实现最小特权原则。

In this paper we present an Extended Workflow Access Control Model （E-EACM） on role basis. This model provides granule authorized management, makes authorization more flexible and accords with workflow process perfectly. Time parameter is added to the model to enable the authorizing process corresponding with workflow process and to realize the least privilege principle.