Research And Implementation Of Workflow Security Framework Based On Improved T-RBAC Model

With the continued expansion of electronic information technology and enterprise software scale, all kinds of enterprise management system for safe and highly efficient and flexible access control strategy put forward higher requirements. The traditional access control model, is no longer suitable for more complex business logic environment, therefore need a fine-grained, adapt to the complex business logic, and fusion of the presence of the general model of enterprise management.First of all, in this paper, the access control technology and workflow at home and abroad were researched. In this paper, the improved model is put forward based on the T-RBAC. And it applicates the model in the workflow security problems. That has important applicating value. The main work is as follows: determining to use the improved task and role based access control technology to build enterprise security framework of workflow, introducing the role-based access control, access control based on task, and access control based on role and task, through the analysis of their characteristics, I summarized the existing deficiencies of the using of task and role based access control model in the frame of the workflow.Secondly, this paper puts forward an improved model of access control based on roles and tasks. Before the new model is based on task and role access control model of task driving characteristics, and the task classification on the basis of the simplified for tasks at the same time to add the relevant attributes including task status, the task context and time limit. Moreover, the improved model through the establishment of private roles, and add task history well solved the problem of the separation of duties. The improved model has not only realized the dynamic management of permissions better than the original model, but also achieved a more fine-grained permissions management. Therefore it makes the access control model has better security.Finally, the article talked about the workflow security framework from the overall architecture design. Its main components include workflow module, access control and authentication module. And it applied the workflow security framework to the dual fuel production auxiliary system.