基于任务和角色的工作流访问控制模型

Workflow Access Control Model Based on Task and Role

提出一种基于角色和任务的工作流访问控制模型,并描述模型中用户、角色、许可、活动等要素间的指派关系和该模型的静态、动态约束规则,然后以此模型为上下文背景提出一个描述基于角色和任务的工作流授权约束的直观的形式化语言,称为ERCL。它以系统函数、集合一级变量符作为基本元素。最后给出一个该模型在实际工作流系统中的应用。

This paper proposes a role and task based workflow access control model,describes the relationship both the key elements of the model,static and dynamic constraints.And then an intuitive formal language called ERCL is proposed,which takes the model as context to specify workflow authorization constraints based on role and task.ERCL uses system functions,sets and variable symbols as its basic elements.Finally,gives a application of the model in a workflow system.