工作流系统带权角色与周期时间访问控制模型  

A Weighted Role and Periodic Time Access Control Model of WorkFlow System

作　　者：王小明[1] 赵宗涛[2] 郝克刚[3] 

机构地区：[1]陕西师范大学计算机科学学院,陕西西安710062 [2]第二炮兵工程学院计算机科学系,陕西西安710025 [3]西北大学计算机科学系,陕西西安710069

出　　处：《软件学报》2003年第11期1841-1848,共8页Journal of Software

基　　金：国家自然科学基金;国家高技术研究发展计划(863)~~

摘　　要：带权角色激活任务和周期时间授权是工作流系统访问控制研究尚未解决的核心问题.以基于角色的访问控制模型为基础,提出了一种新的工作流系统带权角色与周期时间访问控制模型WRPTAC(weighted role and periodic time access control).讨论了周期时间表示方法,定义了工作流系统授权新概念和时态授权推导规则,给出了时间复杂度为O(n2)的时态授权推导规则一致性验证图论算法,并定义了任务激活约束规则.它能够表达复杂的工作流系统访问控制约束.A weighted role for activating task and periodic time authorization is an unsolved major problem for the access control of a workflow management system (WfMS). In this paper, a novel weighted role and periodic time access control (WRPTAC) model for WfMS is proposed on the basis of a role-based access control model. The periodic time expression method is discussed and then the new authorization concepts and the temporal authorization derivation rules for WfMS are defined respectively. An algorithm based on the graph theory for verifying the consistency of all the authorization derivation rules is presented, which has the time complexity of O(n2). The constraint rule for activating task is defined, which can express complex access control constraints for WfMS.

关 键 词：工作流 任务 周期时间 带权角色 授权约束 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]