CAJ | 학술논문

针对传统的访问控制模型在支持细粒度授权和访问控制灵活性上的不足,提出了一种基于属性和任务的工作流访问控制模型,并给出了模型中元素、关系的形式化描述. 新模型保留了任务驱动的特点,同时又引入了属性概念,采用基于实体属性而不是基于身份的授权机制,可提供动态的、细粒度的访问控制. 采用XACML技术实现模型的访问控制方案,使得访问控制模型具有良好的灵活性、扩展性.
침대전통적방문공제모형재지지세립도수권화방문공제령활성상적불족,제출료일충기우속성화임무적공작류방문공제모형,병급출료모형중원소、관계적형식화묘술. 신모형보류료임무구동적특점,동시우인입료속성개념,채용기우실체속성이불시기우신빈적수권궤제,가제공동태적、세립도적방문공제. 채용XACML기술실현모형적방문공제방안,사득방문공제모형구유량호적령활성、확전성.
Because of the lack of support for fine -grained authorization and flexible access control in tradi-tional access control model .This paper presents workflow access control model based on attribute -task, and gives the formal description of the elements and relationship of the model .The model retains the feature of task-driven ,while the introduction of the concept of property .The model adopted the authorization mecha-nism based on subject entity attributes ,but not use identity .This mechanism can resolve administrative scal-ability problem and provide fine -grained access control .Furthermore , using the XACML technology a-chieve model access control scheme , making access control model has good flexibility and scalability .