【摘要】 基于分布式的工作流系统面临着日益复杂的数据资源安全管理难题,基于TBAC的访问控制可以与工作事务处理流程紧密结合,因此可根据工作流中任务和任务状态实现对数据资源的动态访问控制。本文在分析基于任务的访问控制原理基础之上,将基于角色的授权机制与基于任务的访问控制相结合,采用任务层次分解方法建立全局工作流图,应用分散管理策略建立分布式工作流的安全访问控制模型,并对该模型实现进行了详细阐述。更多还原

【Abstract】 One of the most challenging problems in large distributed workflow management systems is the complexity of security administration.The TBAC(task-based access control) shows powerful capability in dynamic access control by being integrated with workflow transaction processing,and manages the permissions dynamically according to the tasks and the task status of workflow.This paper integrates the role-based authorization with the task-based access control by analyzing the principle of task-based access control,and a task level partitioning method is introduced to present the global workflow schema.In addition,decentralization management policies are applied to establish the access control of distributed workflow,and the realization of this model is expatiated as well.更多还原