产品生命周期管理的访问控制模型研究

Research of Access Control Model in Product Lifecycle Management

探讨了产品全生命周期管理环境下对数据的访问控制需求,分析了实施数据访问控制的相关要素及其相互关联,提出一种基于生命周期和角色的LRBAC访问控制模型,对比分析了LRBAC模型中“推模式”与“拉模式”权限算法的优缺点,给出了“拉模式”权限算法的具体实现.以LRBAC模型在某汽车制造企业PDM二期工程的应用为实例,验证了其先进性与高效性.

Requirements, key issues, and related works of data access control are introduced, and key elements and their interaction in data access control are analyzed in the paper. L-RBAC model is put forward based on lifecycle status of the product data and roles of the accessing user. After comparing push mode and pull mode in L-RBAC model, a permission calculation algorithm is given. L-RBAC model is implemented in a PDM project of an automobile company, as an example to testify the effectiveness of the model.