【摘要】 在一个组织中,权限管理是个非常复杂而又重要的任务。为确保组织的业务过程中各项任务只能被合法的用户所执行,建立授权模型并验证权限分配的正确性是十分必要的。彩色Petri网具有比Petri网更强的表达能力,可以用来建立一个完整的权限管理模型,不仅包含权限管理,还包含安全约束如SoD(职责分离)以及角色层次关系结构(role hierarchy)等概念。使用Petri网建模的一个优势是它建立在坚实的数学基础之上,并且得到了许多分析验证技术和工具的支持,如使用线性代数技术分析授权状态的可达性。更多还原

【Abstract】 The administration of authorizations in an organization is a complex task.To ensure that tasks constituting the business pro-cesses are performed by authorized users,the proper techniques of modeling and analyzing authorization mechanism are required.Co-lored Petri net formalism is used to model authorization management,security constraints like separation of duties,and role hierarchy in an elegant way to form an integrated authorization management model.One of the great advantages of using Petri net formalism for system modeling is its strong mathematical foundation and the availability of a rich set of analysis techniques.Linear algebraic technique is used to analyze the reachable authorization states.更多还原