【摘要】 工作流管理系统(WFMS)广泛应用于一个组织中的业务过程协作与流程化管理.约束是组织为了实现安全策略而制定的一些规则,因此WFMS需要研究约束机制.基于角色的访问控制(RBAC)技术在WFMS中得到了广泛的应用,而约束也是RBAC的一个重要方面.责任分离(SOD)是一种典型的授权约束.研究了约束的定义、发展与分类,并对责任分离做了讨论.最后给出了约束的形式化描述语言RCL2000.更多还原

【Abstract】 Work Flow Management System(WFMS) is widely used for the organization’s transaction process cooperation and flow management.Restriction includes several rules which are established for implementing security policy. Therefore,we need to research the restriction of WFMS.Role-Based Access Control(RBAC) is widely used in WFMS.Meanwhile,restriction is also an important aspect of RBAC.Separation of Duty(SOD) is a typical authorization restriction.This paper analyzes restriction’s definition,development and classification,and discusses SOD.Finally the paper presents the formalized language RCL2000 of restriction.更多还原