网络化制造环境下共享资源的访问控制技术综述

The access control technology of sharing resource in networked manufacturing environment

文章阐述了网络化制造系统中制造资源的共享模式,分析了共享制造资源安全访问控制领域的特殊需求。综述了网络化制造系统中使用的资源访问控制模型——RBAC模型及基于此模型的一系列访问控制技术:角色层次、访问控制域、角色代理、访问控制约束等,分析了这些技术在网络化制造系统中的应用方式。针对虚拟组织形态的结构特征和运行特征,提出了基于RBAC模型和角色代理技术的虚拟组织形态资源访问控制模型。

By analyzing the sharing modes of the manufacturing resources in networked Manufacturing Environment, those special requirements of access control of shared manufacturing resources are acquired. A popular mode employed widely in networked manufacturing system, RBAC, is described in detail. Access control techniques involved in this mode including role hierarchies, access control domain, role delegation and constraint also are introduced sequentially, and moreover, the application of those techniques in networked manufacturing system are illustrated. An extended RBAC mode is developed to execute the access control in virtual organization in networked manufacturing field based on its construction and runtime characteristic.