面向企业级流程的职责分离框架及其冗余分析  

Enterprise-Level Business Process Oriented Framework for Separation of Duties with Its Redundancy Analysis

作　　者：翟治年[1] 卢亚辉[2] 奚建清[3] 赵铁柱[4] 汤德佑[3] 顾春华[5] 

机构地区：[1]浙江科技学院信息与电子工程学院,浙江杭州310023 [2]深圳大学计算机与软件学院,广东深圳518060 [3]华南理工大学计算机科学与工程学院,广东广州510006 [4]东莞理工学院工程技术研究院,广东东莞523808 [5]华东理工大学信息科学与工程学院,上海200237

出　　处：《电子学报》2013年第10期2087-2093,共7页Acta Electronica Sinica

基　　金：国家自然科学基金(No.6093114;No.60973100;No.51246002;No.61272200);广东省自然科学基金(No.S2012040007746)

摘　　要：为企业级工作流授权机制定义了多维可泛化的职责分离框架,能够对团队任务涉及的多种分工形式进行深入全面的限制.系统分析了框架中的约束覆盖规则,并证明其正确性和完备性,为约束管理自动化奠定了基础.作为应用,根据规则给出了冗余动态约束的检测算法.最后通过案例研究验证了模型特性.Based on some enterprise-level workflow authorization mechanisms ,a multi-dimensional and generalizable frame-work for Separation of Duty is specified ,and multiple labor dividing forms related to team-collaborated tasks can be restricted deeply and all-sidedly .Coverage rules among these constraints are analyzed systematically .The correctness and completeness of these rules are proved such that a basis for the automation of constraint administration is provided .As application of the rules ,a detecting algo-rithm for redundant dynamic constraints is given .Finally ,the features of this model are verified via a case study .

关 键 词：访问控制 任务 角色 细粒度职责分离 冗余约束 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]