基于角色与监控组件可配置的访问控制

Configurable Access Control Based on Role and Monitoring Component

依据制造设备共享中的访问控制需求,提出了基于角色与监控组件可配置的访问控制模型.在该模型中,监控组件封装了监控变量和对该变量的操作权限,而每个加工任务实例化为其涉及角色所对应的一系列监控界面.由各种监控组件按角色配置而成的监控界面一方面是状态数据显示以及设备控制的平台,另一方面也是执行基于任务与角色的访问控制载体.并阐述了基于角色的监控界面可重构思想和冲突处理方法.

According to the access control needs in the sharing of manufacturing equipments,the configurable access control model is proposed based on the role and monitoring components.In this model,monitored variables and the privileges of operating variables are encapsulated in every monitoring component,and each processing task is instantiated as a series of the monitoring interfaces,each of which corresponds to a role involved in this task.Each monitoring interface is composed of the instances of monitoring components according to the role.On one hand,the monitoring interface is a platform for the state data display and equipment operation;on the other hand,it functions as the carrier to enforce the access control based on task and role.Role-based monitoring interface reconfiguration and an approach to resolve the conflicts are described.