This paper designs a fault tolerance model, according to the type of fault, automatically selecting fault tolerance strategy in workflow subsystem. To unrecoverable exception, transaction compensation mechanism is used for exception handling. To recoverable exception, automatic recovery strategy is used for exception handling. Detailed description of the message queue, transaction compensation mechanism, automatic recovery mechanism which are used in the model are presented.