面向Web服务工作流系统的访问控制模型

提出了一种面向Web服务工作流系统的访问控制模型（WSWF-RBAC）。在基于角色的访问控制模型基础上引入系统资源的概念，把Web服务对象、属性和其它功能模块当做资源统一管理。引XT资源访问模式的概念，在约束条件下通过与资源的运算生成系统权限，从而实现了对权限的精细管理和动态调整能力。通过扩展web服务访问的角色集和用户集，并引入角色扮演对象，实现了工作流系统中Web服务与其它模块访问控制的一致性。将该模型应用于库房供应链系统中，运行结果表明，该模型能够增强Web服务工作流系统授权的灵活性和安全性。

Access Control Model for Web Services Based on Workflow System

An access control model for web services based workflow system is constructed. The concept of system resources is introduced on the base of RBAC model while the web service objects, their attributes, and other function modules are managed as resources. Then the concept of resource access mode is introduced, and it is multiplied by the resources to generate system permissions under the constraint ondition. Thus the ability of fine management and dynamic adjustment of permissions is improved. By expanding the role s∪t and user set for the access to web services, and by introducing role-playing actor, the access control consistency of web services and other modules in workflow system is achieved. This model is applied to warehouse supply chain system and operation results indicates that the model can enhance the authorization’ flexibility and security in the web services based workflow system.