基于任务访问控制模型(TBAC)与传统的访问控制模型不同,它不是将访问许可与角色或用户联系起来,而是将许可与任务联系。本文在基于任务的访问控制对象建模的基础上,为使不同的异质的工作流系统下的任务可以安全地迁移,授权的紧密性得到保证,引入了授权单元的概念,并在工作流系统中讨论了授权单元的应用,将授权与工作流紧密结合,强调上下文联系,最后就实际解决TBAC模型中存在的授权原子性和事件触发等问题讨论了解决方案。 Based on the Task Access Control Model (TBAC), unlike the traditional access control model, it does not relate an access license to a role or user, but instead relates the permission to the task. Based on the task-based access control object modeling, in order to make the tasks in different heterogeneous workflow systems migrate safely, the compactness of authorization is guaranteed, the concept of authorization unit is introduced, In the system, the application of authorization unit is discussed, the authorization and workflow are closely combined, the context is emphasized, and finally the solution is discussed in order to solve the problem of authorization atomicity and event trigger in the TBAC model.