The Access Control Model Of Workflow Management Based On Role And Task

As the rapid development of computer technology and network technology, workflow management system has been applied widely and its security issue has also attracted widespread attention. Access control technology is an important way to ensure information security. It is applied widely in the workflow management system to ensure the security of system data and the validity of the operation authorization.In this thesis, some usual access control technologies are researched deeply in the workflow management system. Hereby an A-RTBAC(Attribute Role and Task Based Access Control) is provided. It adds attribute constraint between role and task instance when the task instance is appointed to role. This makes the executor can more meet the requirement of the task instance. The following several aspects are introduced in the research:(1)To discuss and analyze deeply the access control model about the workflow management system and the merit and demerit of existing access control model.(2) To provide A-RTBAC which adds attribute constraint between role and task instance when the task instance is appointed to role. One of role’s users which meets the attribute constraint requirement of the task instance can gain the permission to execute it in A-RTBAC. A-RTBAC improves the match between role and task instance and the security of system against RTBAC.(3)To give the formal definition and the constraint rules of A-RTBAC。(4) Based A-RTBAC,a rights management subsystem of Weike learning resource management system is designed and developed.