A Task-and-Role-Based Access Control Model for Workflow System

摘要：

An access control model called T&RBAC (task-and-role-based access control) is proposed,which based on RBAC and TBAC and models from the tasks in workflow and dynamically manages the permissions through tasks instances and task context.In the T&RBAC model,permissions are assigned to tasks,tasks are assigned to role,and the relationships between tasks and task instances are defined.The basic concepts of T&RBAC are explained, the formalization descriptions are given,the related methods which use task context to dynamically control security permission are be put forward,and the strategies used to assign users to role are established.At last,the supported security principles are be analyzed.

关键词： Access Control Task Role Workflow User Assignment Strategy

作者: Xu yi

作者单位: School of information technology,Jiangnan University,Wuxi,Jiangsu,214122,China

会议类型: 国际会议

会议名称: 2008年国际电子商务、工程及科学领域的分布式计算和应用学术研讨会(2008 International Symposium on Distributed Computing and Applications for Business Engineering and Science)

会议地点: 大连

会议语种:英文

页码: 843-846

在线出版日期: 2008-07-27（万方平台首次上网日期，不代表论文的发表时间）