A Workflow-Role Based RBAC Model Design And Realization

Computer network and Web technology growing up, electronic business develops rapidly. Electronic business has much more advantages than traditional business mode, so it will bring out huge affects for society and economy. Yet, network security is a biggest handicap against its development.This article mainly discusses workflow-based electronic business's privilege management. At first, it describes electronic business's meaning and importance, believes electronic business development dependents on security. After analyzing electronic business's general procedure, this article concludes its best working method is workflow. Then the author thinks workflow system's most important problem is privilege management. After analyzing conventional privilege management model, the author finds its weakness and gives two new conceptions: task and primary unit and puts up with Workflow-Role RBAC model. In section 4, the author gives the new model a formal definition, explains thoroughly all the conceptions in the new model and gives the regulations obeyed by the new model. This article specifies role conflict problems, proves some theorems about them. To specify that new model is better than standard RBAC model, the author formally proves this view by comparing their authorization size. In the last section, the author discusses model realizing. The article gives the model's whole architecture, describes every module's proposes and the relations of them, then discusses how to realize them.For knowledge and length's restriction, this article doesn't discuss environment management, anglicizing visit history with AI, authorization betweendomains and so on. These problems need studying later.