基于任务的工作流访问控制模型和实现框架  

A Task-based Access Control Model of Workflow System and Framework

作　　者：陈丽侠[1] 陈刚[1] 董金祥[1] 

机构地区：[1]浙江大学计算机学院,浙江杭州310027

出　　处：《计算机应用研究》2003年第9期42-44,共3页Application Research of Computers

基　　金：国家高技术研究发展计划课题"基于ASP的网络化制造应用集成服务技术与系统"资助项目(2001AA415220)

摘　　要：工作流中角色只有在执行任务时才需要权限,任务与权限密不可分,而现有的基于角色的访问控制不能满足工作流这一特性。提出了基于任务的访问控制模型,该模型根据工作流的具体要求,对任务分配相应的权限,角色执行任务,权限则传递给角色,实现了权限的按需分配,提高了数据访问的安全性,简化了角色系统的管理,最后给出了模型的一个实现框架以及运行过程。Roles need privileges only when roles execute tasks,and privileges can't beseparated from each other.But existing role based access control models can't meet this characteristic of workflow systems.This paper presents a taskbased access control model which assigns privileges to tasks based on the requirements of the workflow system.Then privilege is assigned to the role only whien the role executes the task.Thus this model not only simplified the management of roles,but also realizes the function of assigning the privileges according to the practical needs and improves the security of the access of data.In the end,this paper describes a framework and its running process.

关 键 词：RBAC 工作流 访问控制 任务代理 

分 类 号：TP39[自动化与计算机技术—计算机应用技术]