PDM系统间的安全交互模型  

Secure information exchange model between PDM systems

作　　者：刘端阳[1] 平玲娣[1] 潘雪增[1] 

机构地区：[1]浙江大学计算机科学系,浙江杭州310027

出　　处：《浙江大学学报（工学版）》2004年第1期29-34,共6页Journal of Zhejiang University：Engineering Science

基　　金：浙江省自然科学基金资助项目(600014).

摘　　要：现有的用户名/密码等访问控制机制在交互时存在着很大的安全缺陷.为了更有效地满足企业产品数据管理(PDM)系统安全交互的需求,在现有企业PDM系统的通用安全管理模型的基础上,提出并设计实现了基于公钥证书的属性证书模型—AA代理模型.新模型依据TTP(可信第三方)的结构来传递企业间的信任关系,增强了企业协作的自动化,减少了交互的成本.它不仅实现了可靠的身份鉴定和安全的数据传输,同时也实现了灵活的访问控制和安全审计功能,有效地解决了企业信息交互的问题,可用于汽车、电子、机械等制造行业.With the development of collaboration among enterprises, it is desirable to securely exchange information between PDMs through Internet. The original user/password mechanism is weak, unsecure and inflexible. An authorization based on PKC (public key certificate) cannot satisfy the temporary relations between enterprises. To satisfy the demand of secure information exchanges between enterprises, according to the general security management model of PDM system, this paper designed an AC (attribute certificate) model based on the PKC. The model was based on TTP architecture to achieve trust between enterprises and automation of enterprises' collaboration, and reduced the startup cost. And it provides not only reliable authentication and data protection, but also flexible access control and secure audit, and implements information exchanges between enterprises. The new model can be well used in the fields of automobile, electronic and mechanic industries.

关 键 词：PDM系统 安全交互模型 产品数据管理 属性证书 公钥证书 制造企业 

分 类 号：F270.7[经济管理—企业管理] TP393[经济管理—国民经济]