网络化制造中协同环境的访问控制技术  

Access control for collaborative environment in networked manufacturing system

作　　者：梁策[1] 肖田元[1] 张林鍹[1] 

机构地区：[1]清华大学自动化系国家CIMS工程技术研究中心,北京100084

出　　处：《计算机集成制造系统》2007年第1期136-140,152,共6页Computer Integrated Manufacturing Systems

基　　金：国家863/CIMS主题资助项目(2004AA414020)。~~

摘　　要：针对网络化制造中协同环境的安全问题,分析了现有访问控制模型以及网络化制造协同任务的应用特点。在此基础上将基于角色访问控制模型应用到协同环境中,扩展了ARBAC97,将协同环境中的事务同角色模型中的操作结合起来,给出了协同环境事务与角色模型操作的映射规则,在时序上保证了系统内部授权一致性。最后,讨论了该模型的体系结构和实现机制,该研究成果已在实际项目中得到了应用,取得了良好的应用效果。Current access control models applied in the network-based manufacturing system and application characteristics of collaborative project were analyzed. Based on these analyses, a role-based access control model was applied in collaborative environment. ARBCA97 was extended and activities in collaborative environment were combined with operations in role models. Mapping rules for activities in collaborative environment and operation in role models were introduced to guarantee authorization consistence in the event-sequence. Finally, the architecture and implementation mechanism of the model were also discussed. The proposed studies were applied in practical production with satisfactory results.

关 键 词：访问控制 协同环境 基于角色的访问控制 事务 上下文 

分 类 号：TP391.9[自动化与计算机技术—计算机应用技术]