Abstract: Because current grid virtual organization access control models do not support grid workflow authorization effectively, a Grid Workflow Access Control Model(GWACM) is proposed. Delegation step, delegation unit and their dependency relationships are defined to formally describe inherent restriction relationships between flow tasks. Life period model of delegation step is described, arithmetics of constructing contexts of delegation steps and delegation units are presented, and dynamic management of delegation permissions is effectively supported.

Key words: information security, grid workflow, delegation step, delegation unit

摘要： 鉴于现有网格虚拟组织访问控制模型没有对网格工作流授权提供有力的支持，该文提出一种网格工作流访问控制模型GWACM，定义了委托步和委托结构体以及它们之间的依赖关系，形式化地描述了流程任务间的内在约束关系，阐述了委托步的生命周期模型。给出了构建委托步和委托结构体激活上下文的相关算法，有力地支持了委托权限的动态管理。

关键词: 信息安全, 网格工作流, 委托步, 委托结构体

CLC Number: 

• TP393