面向工作流的RBAC模型研究  

Research on workflow-oriented RBAC model

作　　者：徐宏[1] 邰伟鹏[2] 

机构地区：[1]安徽工业大学教务处,安徽马鞍山243002 [2]安徽工业大学计算机学院,安徽马鞍山243002

出　　处：《计算机工程与设计》2012年第4期1295-1299,共5页Computer Engineering and Design

基　　金：安徽省教学研究基金项目(2008jyxm316);安徽省教育厅重大基金项目(ZD2008005-1);安徽工业大学青年教师科研基金项目(QZ200916)

摘　　要：针对传统的基于角色的访问控制(RBAC)模型存在数据对象划分不清晰、权限分配不够灵活等问题,基于RBAC模型提出了工作流的概念。即将所有数据对象抽象成业务表单,为每个业务表单分配一个工作流,通过工作流的结点及分配的角色来解决用户与数据对象的权限控制问题。实验结果表明,该模型有效地实现了对数据实例的细粒度控制,具有较好实用性与可操作性,较好解决了相同角色对不同数据对象的不同访问权限控制问题。According to the problems that the traditional role-based access control （RBAC） model for division of the data object is not clear, and distribution of competences is not flexible enough. The concept of workflow in traditional RBAC access control model is presented. Every data objects are abstracted into a business form, and a workflow is assigned to a business form. Through workflow nodes and the role of nodes to solve the problem of access control of the role of users and data objects permis- sion management. Practice shows that the model achieves a fine-grained control of data instances effectively, and has good practi- cability and easy to implement, can solve different access control problem of the same role and different data objects.

关 键 词：面向工作流 权限控制 角色 业务表单 基于角色的访问控制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]