基于角色和任务的工作流访问控制管理模型  

An Administrative Model for Task-Role Based on Access Control in Workflow Systems

作　　者：张晶[1] 杨国林[1] 萨智海[1] 

机构地区：[1]内蒙古工业大学信息工程学院,内蒙古呼和浩特010051

出　　处：《内蒙古师范大学学报（自然科学汉文版）》2011年第2期187-190,共4页Journal of Inner Mongolia Normal University(Natural Science Edition)

摘　　要：针对现有访问控制模型在工作流系统安全方面存在的不足,提出一种基于角色和任务的工作流访问控制管理模型(ATRBAC).该模型将ARBAC模型中的管理思想融入TRBAC模型,并引入管理员及管理权限,同时对管理员实行层次管理,解决了系统管理员的权限过大而产生的隐患,加强了系统的安全性.To overcome the weaknesses of security existing in the old access control models of workflow systems,a new model called Administrative Model for Task-Role Based Access Control（ATRBAC） is presented in this paper.In this model the administrative idea of ARBAC（Administrative Model for Role Based Access Control） is integrated into the TRBAC（Task-Role Based Access Control） through adding administrator and administrative privilege.By applying hierarchical management on administrators,the hidden risk caused by the excessive privileges of system administrator is solved,and the security of workflow system is further strengthened.

关 键 词：工作流 访问控制 ATRBAC 角色 任务 

分 类 号：TP311.1[自动化与计算机技术—计算机软件与理论]