Research On Workflow-Based Access Control In Information Sharing Platform

This paper was supported by the project "information sharing platform". The resources input workflow subsystem is what we studied. Access control in education resource input and management is the main research direction.The paper firstly studied the basic theories of workflow and workflow management system, and summarized the needs of access control in workflow management system. Then, the paper studied the existing access control models, focusing on the role-based access control model and task-based access control model. On this basis, the paper advanced the design goals of access control model in workflow management system, and put forward a workflow and role based access control model. The model was described in detail and formal description. Deep discussion was given on constraints and security principles. Definitions of four kinds of conflict and three kinds of constraints were brought forward. Four restriction rules were defined for the principle of the separation of duties. Strict least privilege and premise principle were also discussed. Finally, the model was applied to the resources input workflow subsystem, which tested the availability and security of the model.