关键词: 虚拟企业, 访问控制, 项目团队, 任务角色, 自动授权

Abstract: Based on analyzing the special requirements of information access control in Virtual Enterprises (VE) and the characteristics of the existing access control models,a high effective dynamic access control model based on Project-Team (PT) and Task-Role (TR) named PT-TR Based Access Control (PT-TRBAC) was proposed.On the premise of seamless integrating the enterprise-level RBAC model,the proposed access control model divided virtual enterprise members into different project teams according to the task flow,by which hierarchical fine-grained project-team-based dynamic access control on public information was realized.Meanwhile,the algorithms to update and revoke users authorities,the automatic role assignment policy and the automatic authorization policy were further given.By these methods,the workflow system could be dynamically managed,and the roles of users could be automatically assigned and authorized in VE.

Key words: virtual enterprise, access control, project team, role-task, automatic authorization