工作流系统流程监控权限控制研究  

Monitor permission control for process in workflow system

作　　者：杨书新[1] 王坚[1] 

机构地区：[1]同济大学CIMS研究中心

出　　处：《计算机集成制造系统》2007年第11期2224-2228,共5页Computer Integrated Manufacturing Systems

基　　金：上海市科技发展基金重大资助项目(04DZ11007)。~~

摘　　要：针对工作流系统中监控权限划分粗糙的问题,提出了一个基于角色的访问控制方案。根据工作流执行原理和监控需求,将监控服务分为系统层和应用层,以监控对象、监控人、监控操作方法作为研究对象,给出了形式化描述和细粒度划分。在此基础上,提出了访问控制模型,描述了角色、用户和监控对象等各要素之间的关系,给出了授权方法、潜在规则和实例状态约束,保证了监控操作的合理性。基于以上理论和方案,在已有的项目平台上开发了流程监控子系统,满足了不同层次人员对监控权限的灵活需求。To solve the problem of coarse monitoring permission partition in workflow systems,a role-based access control security solution was put forward.According to workflow execution principles and monitoring requirements,monitoring server was divided into system layer and application layer.Monitoring object,monitor,operation were considered as analysis object,and formal description and fine granularity partition were provided.Based on these,a role-based access control model was proposed,and the relationships among role,user and monitoring object were described.In addition,authorization method,default rules and state-based constraints were given to guarantee monitoring operation security and rationality.Finally,based on the proposed theory and technologies,a workflow monitoring subsystem prototype was developed on an existing project platform.Practice proved that the subsystem could satisfy users＇ flexible requirements for monitoring permission.

关 键 词：工作流系统 监控权限 访问控制 角色 状态约束 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]