基于动态控制机制的工作流安全访问模型  

Workflow Security Access Model Based on Dynamic Control Mechanism

作　　者：巫茜[1] 周庆[2] 

机构地区：[1]重庆理工大学计算机科学与工程学院,重庆400054 [2]重庆大学计算机学院,重庆400044

出　　处：《计算机工程》2012年第9期151-152,173,共3页Computer Engineering

基　　金：国家自然科学基金资助项目(61003246);重庆市教委科学技术研究基金资助项目(KJ110805)

摘　　要：为确保工作流系统安全可靠地工作,在传统基于角色的访问控制模型中引入目标案例、用户管理和目标3个关系元素,设计动态授权机制,构建一种基于动态控制机制的工作流安全访问模型,通过基本约束关系与动态约束条件,保证模型的安全运行,并将其与工作流引擎组件进行集成,为独立安全领域应用提供安全授权服务。应用结果表明,该模型可将动态职责与互惠职责较好地分离,对动态职责进行绑定,为系统工作流安全访问提供技术支持。In order to ensure the workflow system secure and reliable, this paper introduces three relation elements of Target Case（TC）, User Management（UM） and Target（T） in the conventional access control model based on role, designs the dynamic authorization mechanism, and builds a sort of security access model in workflow based on dynamic control mechanism, which ensures the secure running of the model by means of basicconstraint relation and dynamic constraint conditions. The model is integrated with workflow engine component to provide the security authorization service for the application of independent security field. Application results show that the model can better separate the dynamic responsibility and reciprocal responsibility, make the binding of dynamic responsibility, and provide technical support for security access of system workflow.

关 键 词：动态控制机制 工作流引擎 动态授权 访问控制模型 网络化协同设计 

分 类 号：TP391[自动化与计算机技术—计算机应用技术]