改进的动态多级T-RBAC模型

Improved Dynamic Multilevel T-RBAC Model

针对工作流管理系统中动态多级T-RBAC模型对权限的动态调整没有严格的限制,对资源使用状态缺乏监督,进而引发系统授权效率低下、资源请求易陷入死锁、易引发拒绝服务攻击、系统响应速度慢等的问题,提出一种改进模型。增加权限管理者和资源管理者,权限管理者对工作流执行过程中权限的分配与调整进行监督,资源管理者对资源的使用状态进行动态管理与监控,与原有模型相比,新模型可以提高系统的响应效率,防止拒绝服务攻击,并能解决任务执行过程中的死锁问题,符合最小权限原则和职责分离原则。

According to the Multilevel T-RBAC Model in the workflow management system has no strict limit to the dynamic adjustment for permission, lack of supervision on the status of the resource in use, which leads to grant inefficiently, deadlock of resource request, DOS attack and slow system response, so an improved dynamic multilevel T-RBAC model was proposed. The new model has added the Permission Manager and the Resource Manager. Permission Manager is in charge of the supervision of distributing and adjusting permissions in the workflow management system. Resource Manager is utilized to manage and monitor the status of the resource being used dynamically. Prepared with original model, the new model can improve efficiency of system response, avoid the DOS attack and the deadlock in the task execution, and it is responded with the principle of least privilege and the separation of duty.