Association Inheritance Mechanism in Active Authorization Management

您当前的位置：

首页 >

文章列表页 >

Association Inheritance Mechanism in Active Authorization Management

更新时间：2025-07-09

- Association Inheritance Mechanism in Active Authorization Management
- Vol. 46, Issue 4, Pages: 24-31(2012)
- 作者机构：
  
  华南理工大学计算机科学与工程学院,广州,510006
- 作者简介：
- 基金信息：
- DOI：
  CLC： TP309
- Online First：10 April 2012，
  
  Published：2012
- 稿件说明：
移动端阅览
Association Inheritance Mechanism in Active Authorization Management[J]. 2012, 46(4): 24-31.
DOI：

Association Inheritance Mechanism in Active Authorization Management[J]. 2012, 46(4): 24-31. DOI：

摘要

为解决主动授权管理模型中普遍和长期存在的任务间重复授权问题

提高工作流授权的伸缩性

提出一种基于职能关联的权限继承机制.通过对传统的角色任务指派关系进行深入挖掘

定义了职能关联概念及其特化与管理关系; 根据职能关联的分量和属性给出了2种关系的推导规则

并按2种关系上的继承性区分业务性和管理性授权

从而建立了可自动配置的授权继承结构.论文评审工作流上的验证结果表明

较之现有各类模型

文中提出的模型以10%以下的额外手工操作减少了53%以上的授权操作

较好地克服了任务间重复授权这一缺陷

取得了明显的授权伸缩性优势.同时

该模型还提供对任务内多角色协作的支持.

Abstract

A permission inheritance mechanism based on function associations is proposed to address the widespread and long-stand issue of repetitive authorizations among tasks in active authorization management models and to enhance the authorization scalability in workflow systems. The definition of function association with specialization and management relations is given by analyzing the traditional relation of role-task assignment. Inference rules about the two relations on function associations are obtained from the components and attributes of function associations

then authorizations are divided into two types of business and management based on the inheritance on the two relations. Thus auto-configurable authorization inheritance structures are established. Comparisons with existing models for a paper review workflow show that authorization operations are reduced by more than 53% with only 10% or less extra manual operations. Therefore

repetitive authorizations among tasks are effectively reduced

and distinct superiority in authorization scalability is achieved. Meanwhile

the collaboration of multiple roles within a task can be supported.

关键词

Keywords

references

THOMAS R, SANDHU R. Task-based authorization controls(TBAC): a family of models for active and enterprise-oriented authorization management [C]∥Proceedings of the IFIP 11th International Conference on Database Security. London, UK: Chapman & Hall, 1997: 166-181.

ATLURI V, HUANG Wei-kuang. Petri net based safety analysis of workflow authorization models [J]. Journal of Computer Security, 2000, 8(2/3): 209-240.

SANDHU R, COYNE E, FEINSTEIN H, et al. Role-based access control models [J]. IEEE Computer, 1996, 29(2): 38-47.

OH S, PARK S. Task-role based access control model [J]. Journal of Information Systems, 2003, 28(6): 533-562.

AALST W M P, KUMAR A. A reference model for team-enabled workflow management systems [J]. Data and Knowledge Engineering, 2001, 38(3): 335-363.

WU Shengli, SHETH A, MILLER J, et al. Authorization and access control of application data in workflow systems [J]. Journal of Intelligent Information Systems, 2002, 18(1): 71-94.

裘炅,谭建荣,张树有,等. 应用角色访问控制的工作流动态授权模型[J].计算机辅助设计与图形学学报, 2004, 16(7): 992-998.

QIU Jiong, TAN Jian-rong, ZHANG Shu-you, et al. Workflow dynamic authorization model with role-based access control [J]. Journal of Computer-Aided Design and Computer Graphics, 2004, 16(7): 992-998.

马晨华, 陆国栋, 裘炅. 面向工作流系统的柔性策略访问控制模型[J]. 浙江大学学报:工学版, 2008, 42(12): 2112-2120.

MA Chenhua, LU Guodong, QIU Jiong. Flexible policy access control model for workflow systems [J]. Journal of Zhejiang University: Engineering Science, 2008, 42(12): 2112-2120.

马晨华,王进,裘炅,等. 基于情景约束的工作流柔性访问控制模型[J]. 浙江大学学报:工学版, 2010, 44(12): 2297-2308.

MA Chenhua, WANG Jin, QIU Jiong, et al. Flexible context-constraint-based access control model for workflows [J]. Journal of Zhejiang University: Engineering Science, 2010, 44(12): 2297-2308.

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

An Access Control Model with Task-State Sensitivity and Its CPN Simulation

Feature-Based Framework of Process Planning Integrated with Numeric Control Operations

Process Evolution Based on Change Domains

Design and Validation of Universal Access Control Signaling Protocol Based on Next Steps in Signaling

An Attribute-Constraints-Oriented Automated Trust Negotiation Model

Related Author

郭玉彬 4

卢亚辉 3

奚建清 2

屈满仓 2

李俊民 2

张英杰 1

沈钧毅 1

Related Institution

浙江科技学院信息学院

华南理工大学计算机科学与工程学院

School of Mechanical Engineering, Xi'an Jiaotong University

School of Electronics and Information Engineering, Xi'an Jiaotong University

College of Software and Microelectronics, Northwestern Polytechnical University

⁰