网络化协同制造环境下的混合访问控制模型  

Hybrid access control model in networked collaborative manufacturing environment

作　　者：姜洋[1] 金天国[1] 刘文剑[1] 

机构地区：[1]哈尔滨工业大学机电工程学院,黑龙江哈尔滨150001

出　　处：《计算机集成制造系统》2009年第7期1279-1285,共7页Computer Integrated Manufacturing Systems

基　　金：国防科工委基础科研资助项目(D0420060521)~~

摘　　要：在项目驱动的网络化协同制造环境中,针对信息资源的安全问题,设计了一种混合访问控制模型。该模型将基于任务的访问控制与基于角色的访问控制相结合,把协同制造环境中对共享资源的操作限制在具体的子项目/任务之中,以此保证协同环境的机密性和完整性。对于在协同环境下跨管理域的私有资源访问,给出了一种授权评价算法,以虚拟角色间的信任度,来判断是否赋予用户动态权限。最后,讨论了该模型的体系架构,并对评价算法进行了仿真实验。结果表明,该算法符合应用需求,验证了算法的正确性。A hybrid access control model was presented for information resources security in the project-driven networked collaborative manufacturing environment. This model combined the task-based access control model with the role-based one, limited all operations to public resource in a concrete sub-project or a task so as to guarantee the confidentiality and integrity in the collaborative environment. An authorization evaluation algorithm was introduced for the private resource access of cross administration domains in collaborative environment. Confidence value of virtual roles was used to judge whether to give users dynamic permissions or not. Finally, the architecture was discussed and the simulation experiment of the algorithm was carried out. Simulation result satisfied the application requirements and the validity of the algorithm was proved.

关 键 词：协同制造 访问控制 项目 授权评价 信任度 

分 类 号：TP319.9[自动化与计算机技术—计算机软件与理论]