PLM系统的层级式访问控制模型研究  

Research on Hierarchical Access Control Model for Product Lifecycle Management

作　　者：耿建光[1] 丁玉霞[1] 倪永全[1] 温小龙[1] 

机构地区：[1]北京神舟航天软件技术有限公司,北京100094

出　　处：《信息安全与技术》2014年第9期25-29,共5页

基　　金：多型号多批次技术状态管理技术;基金编号:5131801010

摘　　要：面对PLM/PDM系统应用中提出的管理和安全需求,建立了基于上下文的层级式管理框架及其权限控制模型。控制模型包括主体、角色、权限、访问控制规则、类型和实例要素,支持功能权限和实体权限分离,支持类型ACL和实例ACL定义和管理,给出了权限定义和权限计算的过程和方法,实现了对PLM/PDM数字资源的层级式、细粒度访问控制。所建模型已在航天型号协同研制平台(AVIDM)中应用。With the security requirements set forth in PLM system, a hierarchical management framework based on context was established, and the access control model in the framework was given out. The access control model includes users, roles, permissions, access control rules, types and objects, which supports functional privilege and object privilege separation, supports ACL definition and management for type and object, and permission process and permissions calculations was brought up. The model helps to realize hierarchical digital resources, fine-grained access control in PLM. The proposed model has been developed in aerospace applications（AVIDM）.

关 键 词：产品全生命周期管理 上下文 访问控制 基于角色的访问控制 

分 类 号：TP391.72[自动化与计算机技术—计算机应用技术]