【摘要】 针对工作流环境下现有各种权限代理模型存在的不足,提出了一个基于加权角色的工作流权限代理模型。该模型通过给角色加权,并在工作流任务中引入变量,支持条件化部分权限代理;通过引入角色代理树,支持多步权限代理,并给出了权限代理的一致性判定方法。基于该模型,给出了相应的权限代理算法和撤销算法。最后通过一个应用实例,详细演示了该权限代理模型的工作过程和角色代理树的构造。更多还原

【Abstract】 Privilege delegation is an important security administration method in workflow system.To overcome the shortcomings of current privilege delegation models,a weighted-role based privilege delegation model for workflow was proposed.It supports conditional partial privilege delegation by assigning weights to roles and introducing variables to workflow tasks.The role delegation tree was defined and introduced to address the multi-step privilege issue.The criterion to check the consistency of the privilege delegation was provided.Based on the proposed model,the corresponding privilege delegation and revocation algorithms were given.The working process of the privilege delegation and the building procedure of the role delegation tree were demonstrated by an application case study.更多还原