Conflict detection and resolution for authorization policies in workflow systems  

作　　者：Chen-hua MA Guo-dong LU Jiong QIU 

机构地区：[1]Engineering & Computer Graphics Institute, Zhejiang University, Hangzhou 310027, China [2]Department of Computer Engineering, Hangzhou Dianzi University, Hangzhou 310008, China

出　　处：《Journal of Zhejiang University-Science A(Applied Physics & Engineering)》2009年第8期1082-1092,共11页浙江大学学报（英文版）A辑（应用物理与工程）

基　　金：supported by the National Natural Science Foundation of China (Nos.50705084 and 60473129);the Science and Technology Plan of Zhejiang Province,China (No.2007C13018)

摘　　要：The specification of authorization policies in access control models proposed so far cannot satisfy the requirements in workflow management systems(WFMSs).Furthermore,existing approaches have not provided effective conflict detection and resolution methods to maintain the consistency of authorization polices in WFMSs.To address these concerns,we propose the definition of authorization policies in which context constraints are considered and the complicated requirements in WFMSs can be satisfied.Based on the definition,we put forward static and dynamic conflict detection methods for authorization policies.By defining two new concepts,the precedence establishment rule and the conflict resolution policy,we provide a flexible approach to resolving conflicts.The specification of authorization policies in access control models proposed so far cannot satisfy the requirements in workflow management systems （WFMSs）. Furthermore, existing approaches have not provided effective conflict detection and resolution methods to maintain the consistency of authorization polices in WFMSs. To address these concerns, we propose the definition of authorization policies in which context constraints are considered and the complicated requirements in WFMSs can be satisfied. Based on the definition, we put forward static and dynamic conflict detection methods for authorization policies. By defining two new concepts, the precedence establishment rule and the conflict resolution policy, we provide a flexible approach to resolving conflicts.

关 键 词：Workflow management system （WFMS） Authorization policy Conflict detection and resolution 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论] TP393.11[自动化与计算机技术—计算机科学与技术]