主动授权管理中的关联继承机制

翟治年 1; 奚建清 1; 卢亚辉 2; 汤德佑 1; 郭玉彬 3; 韦凯 1

您当前的位置：

首页 >

文章列表页 >

主动授权管理中的关联继承机制

更新时间：2025-07-09

- 主动授权管理中的关联继承机制
- Association Inheritance Mechanism in Active Authorization Management
- 西安交通大学学报 2012年46卷第4期页码：24-31
- 作者机构：
  
  华南理工大学计算机科学与工程学院,广州,510006
- 作者简介：
- 基金信息：
  
  : 2011-08-25. 作者简介: 翟治年(1977-),男,博士生;奚建清(通信作者),男,教授,博士生导师. 基金项目: 国家自然科学基金资助项目(60903114,60973100);广东省自然科学基金资助项目(10351806001000000);粤港关键领域重点突破资助项目(2006B80407001);广东省教育部产学研结合计划资助项目(2008B090500193);深圳市科技计划基础研究资助项目(JC201005280402A, JC200903120046A)
- DOI：
  中图分类号： TP309
- 网络首发：2012-04-10，
  
  纸质出版：2012
- 稿件说明：
移动端阅览
翟治年 1, 奚建清 1, 卢亚辉 2, 等. 主动授权管理中的关联继承机制[J]. 西安交通大学学报, 2012,46(4):24-31.

Association Inheritance Mechanism in Active Authorization Management[J]. 2012, 46(4): 24-31.
翟治年 1, 奚建清 1, 卢亚辉 2, 等. 主动授权管理中的关联继承机制[J]. 西安交通大学学报, 2012,46(4):24-31. DOI：

Association Inheritance Mechanism in Active Authorization Management[J]. 2012, 46(4): 24-31. DOI：

摘要

为解决主动授权管理模型中普遍和长期存在的任务间重复授权问题

提高工作流授权的伸缩性

提出一种基于职能关联的权限继承机制.通过对传统的角色任务指派关系进行深入挖掘

定义了职能关联概念及其特化与管理关系; 根据职能关联的分量和属性给出了2种关系的推导规则

并按2种关系上的继承性区分业务性和管理性授权

从而建立了可自动配置的授权继承结构.论文评审工作流上的验证结果表明

较之现有各类模型

文中提出的模型以10%以下的额外手工操作减少了53%以上的授权操作

较好地克服了任务间重复授权这一缺陷

取得了明显的授权伸缩性优势.同时

该模型还提供对任务内多角色协作的支持.

Abstract

A permission inheritance mechanism based on function associations is proposed to address the widespread and long-stand issue of repetitive authorizations among tasks in active authorization management models and to enhance the authorization scalability in workflow systems. The definition of function association with specialization and management relations is given by analyzing the traditional relation of role-task assignment. Inference rules about the two relations on function associations are obtained from the components and attributes of function associations

then authorizations are divided into two types of business and management based on the inheritance on the two relations. Thus auto-configurable authorization inheritance structures are established. Comparisons with existing models for a paper review workflow show that authorization operations are reduced by more than 53% with only 10% or less extra manual operations. Therefore

repetitive authorizations among tasks are effectively reduced

and distinct superiority in authorization scalability is achieved. Meanwhile

the collaboration of multiple roles within a task can be supported.

关键词

Keywords

references

THOMAS R, SANDHU R. Task-based authorization controls(TBAC): a family of models for active and enterprise-oriented authorization management [C]∥Proceedings of the IFIP 11th International Conference on Database Security. London, UK: Chapman & Hall, 1997: 166-181.

ATLURI V, HUANG Wei-kuang. Petri net based safety analysis of workflow authorization models [J]. Journal of Computer Security, 2000, 8(2/3): 209-240.

SANDHU R, COYNE E, FEINSTEIN H, et al. Role-based access control models [J]. IEEE Computer, 1996, 29(2): 38-47.

OH S, PARK S. Task-role based access control model [J]. Journal of Information Systems, 2003, 28(6): 533-562.

AALST W M P, KUMAR A. A reference model for team-enabled workflow management systems [J]. Data and Knowledge Engineering, 2001, 38(3): 335-363.

WU Shengli, SHETH A, MILLER J, et al. Authorization and access control of application data in workflow systems [J]. Journal of Intelligent Information Systems, 2002, 18(1): 71-94.

裘炅,谭建荣,张树有,等. 应用角色访问控制的工作流动态授权模型[J].计算机辅助设计与图形学学报, 2004, 16(7): 992-998.

QIU Jiong, TAN Jian-rong, ZHANG Shu-you, et al. Workflow dynamic authorization model with role-based access control [J]. Journal of Computer-Aided Design and Computer Graphics, 2004, 16(7): 992-998.

马晨华, 陆国栋, 裘炅. 面向工作流系统的柔性策略访问控制模型[J]. 浙江大学学报:工学版, 2008, 42(12): 2112-2120.

MA Chenhua, LU Guodong, QIU Jiong. Flexible policy access control model for workflow systems [J]. Journal of Zhejiang University: Engineering Science, 2008, 42(12): 2112-2120.

马晨华,王进,裘炅,等. 基于情景约束的工作流柔性访问控制模型[J]. 浙江大学学报:工学版, 2010, 44(12): 2297-2308.

MA Chenhua, WANG Jin, QIU Jiong, et al. Flexible context-constraint-based access control model for workflows [J]. Journal of Zhejiang University: Engineering Science, 2010, 44(12): 2297-2308.

浏览量

下载量

CSCD

文章被引用时，请邮件提醒。

提交

工具集

关联资源

任务状态敏感的访问控制模型及其有色网仿真

基于特征集成数控工序的工艺设计平台研究

基于更改域的工作流过程演变算法

NSIS下通用访问控制信令协议的设计与验证

面向属性约束的自动信任协商模型