Research And Implementation Of A Task And Role-based Access Control Of Workflow System

Today enterprise's information leak becomes more and more obvious; Companies have to pay more attention to the security of computer system.Especially in a distributed system, due to the sharing of corporate information, security, in particular attention. Computer access control technology as an important component of computer security technology, so cause for concern.The current access control model commonly used include:role-based access control model RBAC and task-based access control model TBAC.However, both models have their shortcomings:RBAC constraints exists illusion of least privilege constraints and too complex to use TBAC. In this paper, a new access control model T-RBAC is proposeed based on these two kinds of access control model. The model combines the advantages of TBAC and RBAC, can solve the existing security problem of workflow system.In addition, we also designed a constraint description language ERCL on the basis RCL2000, ERCL is used to describe the constraints conditions of the model. Finally, a common workflow permission management system is designed and implemented to verify the thesis put forward of this paper include:Innovative work of this paper include:1, a new access control model T-RBAC is designed combining the features of both TBAC and RBAC;2, on the basis of the RCL2000 raise ERCL constraint description language;3, the design and implementation of a common workflow permission management platform;...