基于权限和任务的工作流授权合理性验证  

Verification of workflow authorization reasonability based on permission & task

作　　者：魏永合[1] 舒启林[2] 

机构地区：[1]东北大学机械工程与自动化学院,辽宁沈阳110004 [2]沈阳理工大学机械工程学院,辽宁沈阳110168

出　　处：《计算机集成制造系统》2008年第7期1349-1355,1448,共8页Computer Integrated Manufacturing Systems

基　　金：国家自然科学基金资助项目(60604025)~~

摘　　要：为提高工作流授权合理性验证的效率,提出了基于权限和任务的工作流授权合理性验证方法。通过对工作流授权约束的分析,将授权约束分为针对任务和权限分派关系的权限约束,以及针对任务间职责冲突关系的任务约束和授权约束间约束传递,并在此基础上构建了授权约束规则集对授权合理性进行验证,给出了实现工作流授权合理性验证的算法。最后,通过一个流程实例,证明了该验证方法的实用性。授权约束规则集可以验证约束的完整性和一致性,使满足此规则集的授权工作流既具有必须和足够的授权约束,又保证其每个任务都有合法的用户执行,同时该验证算法可以提高验证的效率。To improve the verification efficiency of Workflow Authorization Reasonability （WAR）, the WAR verification method based on permission and task was proposed. By analyzing the authorization constraints of workflow, three types of authorization constraints were identified： permission constraints based on the task-permission assignment relationship, task constraints based on task duty conflict relationship, and constraint transfer among authoriza- tion constraints. Based on these, the authorization constraint rule sets to verify the reasonability of authorization were constructed. Verification algorithm of WAR was presented. Finally, an example was provided to verify the feasibility of the WAR method. The authorization constraint rule sets could check the integration and consistency of constraints. If a workflow satisfied the rule sets, it could establish necessary and sufficient constraints which ensured legal users to execute each task of the workflow. This algorithm of WAR verification could improve the verification efficiency.

关 键 词：工作流 授权约束 任务 权限 合理性 验证算法 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]