基于业务流程的访问控制模型研究开发

在分析研究RBAC基本模型的基础上，根据网上申报、审批系统的实际需求，提出了一种基于业务流程的访问控制模型，将业务流程和基于角色的权限控制相结合，在业务流程和角色之间建立有效的联系，使有关业务流程的信息能够直接指导角色的设置。该模型克服了RBAC基本模型需要修改角色权限来适应不同业务流程的缺点，真正实现了权限的按需、按流程分配，角色只有在执行特定子任务时才具有权限，权限的分配和回收由系统动态实现。该模型已在网上申报、审批系统项目中应用。

Research and application on access control model based on workflow

Based on the researching of RBAC model,an access control model based on the workflow was proposed according to the actual requirements of online report and approving system. The model combined the workflow and the role-based access control(RBAC),established an effective connection between the workflow and the roles and made the information from the business process guide the settings of roles directly. This model overcomed the shortcoming of RBAC basic model that it must adapt to different workflow by changing the authorities of roles. It could allocate the authority according to the requirements and process,and the roles were only granted with some authorities after it had carried out some sub-missions. The allocation and canceling of the authorities were realized by the system dynamically. The model has been applied in the online report and approving system and has achieved good effects.