基于Web的工作流安全性研究

基于Web的工作流管理系统的安全问题主要涉及到两方面:授权(及访问控制)和安全通讯。工作流管理系统需要一个动态的授权机制,即在工作流的执行过程中动态地分配和撤销相应的权限。文中提出一个动态授权模型,即利用5个授权函数、授权数据库(AB)以及任务执行过程中产生的一些事件来实现动态授权机制。此外还简要介绍了基于Web的工作流中涉及到的安全通讯问题及其解决方法。利用这个模型,可以大大地增强工作流管理系统的安全性能。

Research on the Security of Web - Based Workflow

Most problems concerning the security of Web-based workflow lie in authorization(and access control) and secure communication.Workflow management need a dynamic authorization service,that is,permission can be dynamically granted or revoked.So in this article,a dynamic authorization model is presented:the model performs a dynamic authorization by means of authorization functions,authorization base and some events which are generated during performing tasks.Furthermore,the article depicts some secure issues of communication in Web-based workflow.With the model,can greatly enforce the security in workflow management systems.