工作流系统访问控制技术  

Access Control Technology in Workflow System

作　　者：董巧玉[1] 欧阳昱[1] 刘玉树[1] 

机构地区：[1]北京理工大学计算机科学与工程系,北京100081

出　　处：《计算机应用》2003年第10期126-128,共3页journal of Computer Applications

基　　金：国家"十五"科技攻关计划项目 (2 0 0 1BA1 0 5A1 0 0 6 )

摘　　要：访问控制机制是分布式信息系统安全策略中的核心内容,而访问控制的职责分割是访问控制管理实现的关键技术,是当前安全访问控制领域研究的热点。文中在详细介绍了目前访问控制具有代表性的几种模型和技术的基础上,对这些技术做出相关的评价,分析了目前工作流系统访问控制技术中所存在的不足,对工作流系统访问控制技术的应用领域和未来工作做了进一步的探讨。Access control mechanism is an increasingly important content in security policy of distributed information system. The separation of duty in access control,being the key technology,has becoming a hotspot in the area of access control researches. In this paper,we introduce several currently typical access control models and technologies,and then give evaluations of them. After that,the limitations of current access control technologies in workflow system are also analyzed. Finally,the application areas and the future work of the access control technology in workflow system are pointed out for further discussion. 

关 键 词：工作流 工作流管理系统 访问控制 职责分割 约束规范 授权约束 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]