基于工作流状态的动态访问控制

访问控制是信息系统中一个重要的安全保护机制，访问控制矩阵确定主体对客体的访问权限。本文将角色的概念加入进来，讨论了基于角色的工作流状态的动态访问控制，并对其模型进行了形式化描述和分析。最后，我们给出了一个工作流网的实例来说明这种控制机制既可以降低未授权访问和数据误用的风险，又可以为工作流管理系统的权限管管理提供一定的保证。

Dynamic Access Control Based on Workflow Status

Access control is an important protection mechanism for information systems, an access control matrix grants subject access right to objects. This paper proposes the role concept, discusses the dynamic access control of role-based workflow status, and describes and analyses the formal model. In the end, we present a workflow-net instance to show that the mechanism can not only low the hazard of nonauthorized access and data misuse, but also provide a certain assurance for the privilege management in workflow management systems.