Research And Application Of Access Control And Authorization Constraint Based On Workflow

With the computer and network technology widely used, workflow has become an important technology for enterprise on coordinating business processes, improving resilience and competitiveness. However, the workflow management system has many security risks, it is very important to study the security mechanism of workflow management system in-depth.This paper based on the current situation of access control in workflow management systems, analyzes the workflow sccess control model and authorization constraint and other key technologies in-depth, presents an extended Task-Role-Based Access Control Model. This model can meet the requirements of dynamic and static authorization in workflow management system, assigns users or roles to different tasks according to the relationship between them. Besides, it also can meet the workflow access control for dynamic authorization, least privilege and separation of duties requirements.Through the analysis of workflow authorization constraints, defines three types constraints, they are task constraints, permission constraints and transmission constraints, establishs the sets of task constraints and permission constraints in the process. Then builds the rule sets for constraint authority, and verifies the reasonableness of authorization. At last, a reasonable verification algorithm is given, and a reasonably practicable process is given to verify the practical of the model and the algorithm. Based on the above findings, proposes the application of the electronic bidding system, and designs the system, including the analysis of the system architecture and the design of the class, finally develops the system.This paper presents the extended Task-Role-Based Access Control Model and Authorization Constraint in workflow management system, designs a well security mechanism, and applied in the electronic bidding system, it effectively improves the security and availability of the system.