增强权限约束支持的基于任务访问控制模型  

Task-Based Access Control Model Supported by Enhanced Permission Constraints

作　　者：尹建伟[1] 徐争前[1] 冯志林[1] 陈刚[1] 董金祥[1] 

机构地区：[1]浙江大学计算机科学与技术学院,杭州310027

出　　处：《计算机辅助设计与图形学学报》2006年第1期143-149,共7页Journal of Computer-Aided Design & Computer Graphics

基　　金：国家"八六三"高技术研究发展计划(2003AA411021);国家自然科学基金(60273056)

摘　　要：针对基于任务访问控制模型的权限管理与实现机制的不足,在任务规则的基础上,提出一种增强权限约束支持的基于任务访问控制模型.该模型通过任务型权限集合的定义,把任务与权限融合在一起研究权限产生的约束机制,同时给出模型形式化定义以及权限关联的各种约束规则,并介绍了该模型在AVIDM中的应用.实践表明,该模型提供了更灵活的授权机制,增强了任务模型的实用性,方便了权限管理工作,适合事务管理系统与工作流环境下的访问控制建模.Based on the rule of task, a novel task-based access control （TBAC） model was proposed to improve the permission administration and mechanism in the conventional TBAC model by the definitions of task-permission set alone. The permission constraints focus both on the task and permission, and some formal analyses and some constraints rules for permission set are presented. The proposed model was applied to the Aerospace Vehicle Collaborative Development Management system AVIDM. Experimental results show that the model could provide a more agile authorization and enhance the practicability of task model. Moreover, it simplifies the task complexity of permission administration. It is well suited to the access control in transaction management system and workflow system.

关 键 词：访问控制 角色 任务 权限约柬 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]