一种基于属性和任务的工作流访问控制模型  

Workflow Access Control Model Based on Attribute- task

作　　者：杨琳杰 袁平[1] 王泽芳[1] 

机构地区：[1]西南科技大学计算机科学与技术学院,四川绵阳621010

出　　处：《西南科技大学学报》2015年第3期71-75,共5页Journal of Southwest University of Science and Technology

基　　金：西南科技大学研究生创新基金资助项目(14ycxjj0060)

摘　　要：针对传统的访问控制模型在支持细粒度授权和访问控制灵活性上的不足,提出了一种基于属性和任务的工作流访问控制模型,并给出了模型中元素、关系的形式化描述。新模型保留了任务驱动的特点,同时又引入了属性概念,采用基于实体属性而不是基于身份的授权机制,可提供动态的、细粒度的访问控制。采用XACML技术实现模型的访问控制方案,使得访问控制模型具有良好的灵活性、扩展性。Because of the lack of support for fine- grained authorization and flexible access control in traditional access control model. This paper presents workflow access control model based on attribute- task,and gives the formal description of the elements and relationship of the model. The model retains the feature of task- driven,while the introduction of the concept of property. The model adopted the authorization mechanism based on subject entity attributes,but not use identity. This mechanism can resolve administrative scalability problem and provide fine- grained access control. Furthermore,using the XACML technology achieve model access control scheme,making access control model has good flexibility and scalability.

关 键 词：访问控制 工作流 属性 任务 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]