主动授权管理中的关联继承机制

为解决主动授权管理模型中普遍和长期存在的任务间重复授权问题,提高工作流授权的伸缩性,提出一种基于职能关联的权限继承机制.通过对传统的角色任务指派关系进行深入挖掘,定义了职能关联概念及其特化与管理关系；根据职能关联的分量和属性给出了2种关系的推导规则,并按2种关系上的继承性区分业务性和管理性授权,从而建立了可自动配置的授权继承结构.论文评审工作流上的验证结果表明,较之现有各类模型,文中提出的模型以10％以下的额外手工操作减少了53％以上的授权操作,较好地克服了任务间重复授权这一缺陷,取得了明显的授权伸缩性优势.同时,该模型还提供对任务内多角色协作的支持.

Association Inheritance Mechanism in Active Authorization Management

A permission inheritance mechanism based on function associations is proposed to address the widespread and long-stand issue of repetitive authorizations among tasks in active authorization management models and to enhance the authorization scalability in workflow systems.The definition of function association with specialization and management relations is given by analyzing the traditional relation of role-task assignment.Inference rules about the two relations on function associations are obtained from the components and attributes of function associations,then authorizations are divided into two types of business and management based on the inheritance on the two relations.Thus auto-configurable authorization inheritance structures are established.Comparisons with existing models for a paper review workflow show that authorization operations are reduced by more than 53% with only 10% or less extra manual operations.Therefore,repetitive authorizations among tasks are effectively reduced,and distinct superiority in authorization scalability is achieved.Meanwhile,the collaboration of multiple roles within a task can be supported.