近年來隨著工作流技術的日趨成熟，越來越多的企業(yè)采用它作為提高企業(yè)效率的手段，
但由于目前使用的IPv4 并沒有對數據提供任何安全性保障，因此如何保護其商業(yè)機密，即工作流系統(tǒng)的安全性問題也逐漸受到人們的關注。文章介紹了一個基于Web 的工作流系統(tǒng)SecureWorkflow 的安全體系結構及其安全策略，它充分考慮了在電子政務中的實際需求，并已應用于實際的應用系統(tǒng)集成平臺的開發(fā)。
關鍵字：工作流；安全性；認證
Abstract: Nowadays, as the rapid development of workflow, more and more enterprises adopt
workflow technology, which deals with the coordination execution of business processes, to
improve their efficiency. But as known, on the Web, IPv4 has not provided any security protection for the data, so much attention should be put on the security of workflow management system, especially if it is based on Web. Fully accounting for the practical needs of Electronic Government, in this paper the security architecture and its policy used in a Web-based workflow management system, named SecureWorkflow, which has already been applied in project of Enterprise Application Integration (EAI) platform, is put forward.
Keywords: workflow; security; authorization