摘要
提出一个专门针对协同环境下CAD模型的多层次动态的安全访问控制(multi-level and dynamic security access control,简称MLDAC)模型.该模型利用一种多层次的权限模型,以简化权限定义及其分配过程,丰富了权限表达能力,实现了产品模型的多粒度访问控制.通过参照工作流的基本理念,引入权限的依赖关系及权限状态迁移概念,实现了权限的动态授权管理.通过实践证明,MLDAC模型可以对协同设计操作进行更加有效的控制,符合设计任务间的分工性、依赖性和交互性的特点.
In this paper, a multi-level and dynamic security access control （MLDAC） model is proposed for CAD models in collaborative environment. A multi-level privilege model is developed to simplify the process of permission definition and assignment for enriching the expression ability and helping to realize multi-grained access control. The dependent relation of permission and the permission state migration are brought into MLDAC for dynamic authorization management based on the basic theory of workflow. Based on the practice, MLDAC model is more efficient to control collaborative operations. It meets the characters of design tasks, i.e. divisible, dependent and interactive.
出处
《软件学报》
EI
CSCD
北大核心
2007年第9期2295-2305,共11页
Journal of Software
基金
Supported by the National Natural Science Foundation of China under Grant Nos.60473106
60333010(国家自然科学基金)
the National Research Foundation for the Doctoral Program of Ministry of Education of China under Grant No.20030335064(国家教育部博士点基金)
关键词
访问控制
工作流
信息安全
协同设计
CAD
access control
workflow
information security
collaborative design
CAD
