基于角色和任务的CSCW系统访问控制技术研究  

Study of the Role and Task-based Access Control Technology for CSCW System

作　　者：朱君[1,2] 汤庸[1] 

机构地区：[1]中山大学信息科学与技术学院,广州510275 [2]东莞理工学院计算机学院,东莞523808

出　　处：《计算机科学》2010年第7期130-133,共4页Computer Science

基　　金：国家自然科学基金(60673135);重点项目(60736020);广东省自然科学基金(7003721);广东省科技攻关(07B010200052);广州市科技计划(07Z3-D3191);东莞市科技计划项目(2007108101020)资助

摘　　要：针对现有方法不能很好地满足CSCW系统对访问控制的需求,提出基于角色和任务的CSCW系统访问控制模型RTBAC(Roleand Task-Based Access Model)。该模型形式化地描述了用户、角色、任务、权限、工作流等要素及其相互间的关系,通过分配和取消角色来完成对用户权限的授予和取消,并提供了角色间偏序继承和指派关系定义,通过引入任务概念、任务类型划分及角色和任务之间的关系定义,实现了依据任务和任务状态不同对权限进行动态管理。该模型是针对CSCW系统多用户、动态、协作等特性提出的,能较好地满足CSCW系统对访问控制的需求。CSCW systems have many new requirements for access control,which cannot be met by existing models. In this paper,a new role and task-based access model （RTBAC） was presented to meet these requirements. This model formally describes the relationship between the key elements of access control such as user, role, task, privilege, and workflow. The model grants and revokes access privileges of users by assigning them roles and canceling their roles, and provides partial inheritance and delegation between roles. In this model the conception to task was introduced, group tasks were divided into workflow task and independence task, and the relationship between roles and tasks was described. From those the model can dynamically manage the permissions through tasks and tasks＇ status. RTBAC model is brought forward aiming at accommodating with the characteristics of collaborative systems such as multi-user, dynamic,and collaboration. It can meet the requirements for access control in CSCW system adequately.

关 键 词：CSCW 访问控制 角色 任务 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]