授权机制在工作流管理系统中的应用

访问控制是提高工作流系系统安全的重要机制。基于角色的访问控制(RBAC)被绝大多数工作流系统所采用,已成为工作流领域研究的热点。基于传统的RBAC模型,从工作流访问控制模型与流程模型分离的角度出发,提出了一种将基于角色的静态授权和任务的动态控制相结合的T-RBAC访问控制机制应用于工作流管理中,有效增强了访问控制的灵活性和系统的安全性。该访问控制模型已在企业项目解决方案中得以实施。

Application of Authorization Mechanism to Workflow Management System

Access control is an important mechanism for enhancing workflow system scurity.Role-based access control model(RBAC)is used in the most of workflow systems,and it has become a research topic in the area of workflow.Basd on the traditional RBAC model and embarked from decoupling the workflow access control model from the process model,a T-RBAC was presented,which basd on identity authentication and role authorization.Workflow tasks were run dynamically by using T-RBAC.The model to describe dynamic workflow s...