Research Of The Workflow Access Control Model Based On Organization And Trust

With the rapid development of computer technology, workflow becomes an essential technology in constructing an information system for enterprises and government agencies. In the field of workflow's security, access control is an important research hotspot.This thesis reviews the research status of access control policy, and analyzes the principles and characteristics of the existing access control strategies. Based on them, this thesis introduces a workflow access control model based on organization and trust. The position level is introduced in this model and the frame structure of this model is given in this thesis. This thesis describes the concept of each entity and the relationships between them in detail. This thesis introduces a multilevel trust mechanism, in this mechanism the evaluation of user's behavior and trust computation are introduced. Through the trust computation of user's behavior, it dynamically adjusts user's position, role and permissions, so realizing the dynamic and multilevel authorization. At the same time, this thesis describes the authorization mechanism and collaboration mechanism in detail and gives the specific algorithms of the authorization adjustments. Simulation experiments shows that the introduction of position level can effectively reduce the workload of assignment. Compared with the single stage of trust mechanism, the multilevel trust mechanism can effectively restrain malicious behavior harming the system. And this model can make full use of historical information and hierarchical information in building trust relationships.This model is realized in the trading platform of Shijiazhuang's public resources, and it improves the management efficiency and the security of the system. Finally, this thesis puts forward the future research directions in the distributed environment and data mining field.