Research And Application Of Task-Role Based Access Control In Workflow Management System

Workflow technology meets the demand of optimizing and reengineerring the enterprise's business process continually.It brings significant benefits to the enterprise's business process management.It makes the enterprise achieve office automation.This makes the enterprise promote its efficiency,improve its customer service, and enhance its competitiveness.However, the research of workflow security is lacking comparing with the research of workflow technology.Because of this factor,there are many potential safety problems existing in workflow management system. This seriously limits the wider use of workflow management system. Therefore,depth study of workflow security has great significance.Because of the security needs of workflow management system, the thesis does some related research.First,the thesis introduces the concept of workflow technology and access control technologyAccording to the characteristics of workflow technology,it does some work on the application of access control technology in workflow system and analysis the problems while access control technology applied to the workflow management system.Then, the thesis presents a Task-Role based access control model which can meet the needs of most enterprises.It introduces the concept of task to realize synchronization between authorization flow and workflow. It presents the authorization constraint mechanism and dynamic authorization rules, and formally describes the primary elements of the model. The thesis also does some work on task assignment strategy which is an element of the model,and improves the task assignment strategy based on fuzzy set theory.In the following,the thesis presents a lightweight workflow management system based on relational database.It realizes the access control model mentioned above in the workflow management system.The thesis introduces the access control architecture,and describes the realization approach of each functional module in the architecture in detail.It also introduces the main sequences of the access control in the workflow management system.Finally,the workflow management system is applied to project management of Zhenjiang Water Industry Corporation.The feasibility and practicality of the access control model can be proved through the application.