基于工作流的访问控制模型研究与设计  

Research and Design of the Access Control Model on Workflow System

作　　者：单煜珺 

机构地区：[1]空军大连通信士官学校通信网络系,辽宁大连116600

出　　处：《武警工程大学学报》2012年第6期40-43,52,共5页Journal of Engineering University of the Chinese People＇s Armed Police Force

摘　　要：访问控制技术与访问控制模型理论密切相关，目前业界提出了多种访问控制模型，但这些模型并不能完全满足部队信息化工作流环境下的访问控制需求。结合扩展RBAC模型和TBAC模型的优点，设计出一个专门适用于部队日常业务管理系统的工作流环境下的访问控制模型——扩展T—RBAC（Task—Role—BasedAccessContr01，T—RBAC）模型。实现了工作流环境中的最小特权原则，解决了动态职责分离约束问题，并且访问控制的粒度可以根据实际需要达到合理的程度。Access control technique has a close relationship to the access control model theory, now various access control models have been raised, however, neither of these models would completely meet the needs of access control under workflow system. Adopting the notion of extended RBAC and TBAC, the thesis presents an access control model： extended RTBAC. The model realizes the ＂Least Privilege Principle＂ and solves the ＂Dynamic Separation of Duty Con- straint＂, and supplies access control of appropriate granularity for workflow.

关 键 词：工作流 访问控制 职责分离 

分 类 号：O221.2[理学—运筹学与控制论]