适用于我国电子政务系统的访问控制策略

访问控制策略是电子政务系统信息安全的重要因素之一，基于角色的访问控制（RBAC）是目前应用较多的访问控制策略，但是，由于缺乏对工作流程的表达，这一访问控制策略本身不能够保证角色互斥原则，针对这个不足，我们结合我国电子政务系统的特点，改进了工作流模型中的过程分解方法，将原有任务和原子任务间的相互关系加入基于角角色的访问控制中，共同构成一个系统的访问控制策略－基于过程的访问控制策略，此策略能够使角色互斥原则得到保证，而且任务分割原则符合我国电子政务系统的特点。

An Access Control Policy Suitable for the e-Government in China

The access control policy is one of the important factors for the information security of e-govemment systems. RBAC is a more widely-used access control policy, but the policy itself cannot ensure the principle of mutual exclusion of roles for the lack of expressions of workflow. To overcome this, we improve the method of process decompostition in workflow models, add RBAC to the relationship between atomic tasks in order to constitute a systematic access control policy, that is, the process-based access control policy. This policy can ensure the principle of mutual exclusion, and the principle of task decomposition conforms to the characteristics of China's e-government systems.