中文摘要：

为提高工作流授权合理性验证的效率,提出了基于权限和任务的工作流授权合理性验证方法。通过对工作流授权约束的分析,将授权约束分为针对任务和权限分派关系的权限约束,以及针对任务间职责冲突关系的任务约束和授权约束间约束传递,并在此基础上构建了授权约束规则集对授权合理性进行验证,给出了实现工作流授权合理性验证的算法。最后,通过一个流程实例,证明了该验证方法的实用性。授权约束规则集可以验证约束的完整性和一致性,使满足此规则集的授权工作流既具有必须和足够的授权约束,又保证其每个任务都有合法的用户执行,同时该验证算法可以提高验证的效率。

英文摘要：

To improve the verification efficiency of Workflow Authorization Reasonability （WAR）, the WAR verification method based on permission and task was proposed. By analyzing the authorization constraints of workflow, three types of authorization constraints were identified： permission constraints based on the task-permission assignment relationship, task constraints based on task duty conflict relationship, and constraint transfer among authoriza- tion constraints. Based on these, the authorization constraint rule sets to verify the reasonability of authorization were constructed. Verification algorithm of WAR was presented. Finally, an example was provided to verify the feasibility of the WAR method. The authorization constraint rule sets could check the integration and consistency of constraints. If a workflow satisfied the rule sets, it could establish necessary and sufficient constraints which ensured legal users to execute each task of the workflow. This algorithm of WAR verification could improve the verification efficiency.