工作流中一个基于加权角色的权限代理模型  

Weighted-role based privilege delegation model for workflow

作　　者：张健[1,2] 孙吉贵[1,2] 李妮娅[1,2] 胡成全[1,2] 钱云[3] 

机构地区：[1]吉林大学计算机科学与技术学院,长春130012 [2]吉林大学符号计算与知识工程教育部重点实验室,长春130012 [3]北华大学电气信息工程学院,吉林省吉林市132021

出　　处：《吉林大学学报（工学版）》2009年第4期1057-1063,共7页Journal of Jilin University:Engineering and Technology Edition

基　　金：国家自然科学基金项目(60773097)

摘　　要：针对工作流环境下现有各种权限代理模型存在的不足,提出了一个基于加权角色的工作流权限代理模型。该模型通过给角色加权,并在工作流任务中引入变量,支持条件化部分权限代理;通过引入角色代理树,支持多步权限代理,并给出了权限代理的一致性判定方法。基于该模型,给出了相应的权限代理算法和撤销算法。最后通过一个应用实例,详细演示了该权限代理模型的工作过程和角色代理树的构造。Privilege delegation is an important security administration method in workflow system. To overcome the shortcomings of current privilege delegation models, a weighted-role based privilege delegation model for workflow was proposed. It supports conditional partial privilege delegation by assigning weights to roles and introducing variables to workflow tasks. The role delegation tree was defined and introduced to address the multi-step privilege issue. The criterion to check the consistency of the privilege delegation was provided. Based on the proposed model, the corresponding privilege delegation and revocation algorithms were given. The working process of the privilege delegation and the building procedure of the role delegation tree were demonstrated by an application case study.

关 键 词：计算机应用 工作流 访问控制 权限代理 加权角色 角色代理树 

分 类 号：TP31[自动化与计算机技术—计算机软件与理论]