基于委托的虚拟组织工作流访问控制模型研究

虚拟组织的业务流程跨越了各个组织的边界,其安全性和易管理性都面临着严峻的挑战.本文提出一种基于委托技术的、面向服务的虚拟组织工作流访问控制模型,在预定义的规则约束下实现用户到用户及角色到角色的委托从而使访问权限安全的扩散,把服务作为流程任务的抽象执行和实施访问控制的基本单元,实现了更高效且易于管理的虚拟组织工作流访问控制.

Study on delegation-based access control model for virtual-organization workflow

The business workflows of virtual-organization exceed the boundary of all organizations, and its security and management are faced with many challenges. A delegation-based and service-oriented control access model for virtual-organization workflow is proposed in the paper. In this model, user-to-user and role-to-role delegations are implemented under the constraints ofpredefined rules so that the authorization diffuse safely; services are regarded as the abstraction of a task and the unit for applying access control, so a more efficient and manageable access control for virtual-organization workflow is implemented.