Unified identity authentication has become the basic information service provided by colleges and universities for teachers and students. Security, stability, high concurrency and easy maintenance are our requirements...Unified identity authentication has become the basic information service provided by colleges and universities for teachers and students. Security, stability, high concurrency and easy maintenance are our requirements for a unified identity authentication system. Based on the practical work experience of China University of Geosciences (Beijing), this paper proposes a high availability scheme of unified identity authentication system based on CAS, which is composed of multiple CAS Servers, Nginx for load balancing, and Redis as a cache database. The scheme has been practiced in China University of Geosciences (Beijing), and the application effect is good, which has practical reference significance for other universities.展开更多
随着物联网与互联网融合的不断深化,感知层与应用层之间的互联互通要求不断提高。针对现有数据采集系统存在的规范性、扩展性和适应性不足的问题,文章提出一套基于对象连接与嵌入过程控制统一架构(object linking and embedding for pro...随着物联网与互联网融合的不断深化,感知层与应用层之间的互联互通要求不断提高。针对现有数据采集系统存在的规范性、扩展性和适应性不足的问题,文章提出一套基于对象连接与嵌入过程控制统一架构(object linking and embedding for process control unified architecture,OPC UA)协议的分布式数据采集处理系统架构。对数据采集处理系统各个模块进行功能解耦和架构重组,分别介绍该系统硬件和软件架构;针对发布订阅模式下负载的特异性,提出一种改进的适用于OPC UA分布式订阅的负载均衡算法;最后在某车企实例验证该系统架构。结果表明,基于OPC UA的分布式数据采集处理系统数据采集处理效果良好,证明了该系统架构的可行性及有效性。展开更多
针对我国碳排放工业类型多、碳排放监测数据源多样的问题,设计了一个基于多源异构数据的能源电力碳排放监测诊断服务系统。系统由非分光红外探测技术、改进型微分粒子群算法(particle swarm optimization,PSO)、云计算、对象链接与嵌入...针对我国碳排放工业类型多、碳排放监测数据源多样的问题,设计了一个基于多源异构数据的能源电力碳排放监测诊断服务系统。系统由非分光红外探测技术、改进型微分粒子群算法(particle swarm optimization,PSO)、云计算、对象链接与嵌入统一架构(OLE for process control-unified architecture,OPC-UA)技术等构成。通过改进PSO算法来提高收敛速度,进一步提高数据监测和处理效率。采取OPC-UA技术实现对碳排放多源异构数据进行统一传输和反馈,极大地缓解了系统主机的计算压力。试验结果表明,经系统技术核算的数据误差率在可接受范围内,为其他技术研究奠定基础。展开更多
The content security requirements of a radio frequency identification （RFID） based logistics-customs clearance service platform （LCCSP） are analysed in this paper. Then, both the unified identity authentication an...The content security requirements of a radio frequency identification （RFID） based logistics-customs clearance service platform （LCCSP） are analysed in this paper. Then, both the unified identity authentication and the access control modules are designed according to those analyses. Finally, the unified identity authentication and the access control on the business level are implemented separately. In the unified identity authentication module, based on an improved Kerberos-based authentication approach, a new control transfer method is proposed to solve the sharing problem of tickets among different servers of different departments. In the access control module, the functions of access controls are divided into different granularities to make the access control management more flexible. Moreover, the access control module has significant reference value for user management in similar systems.展开更多
To improve the human-physical-virtual coordination and integration of the digital twin workshop,3D visual monitoring and human-computer interaction of the digital twin workshop was studied.First,a novel 6D model of th...To improve the human-physical-virtual coordination and integration of the digital twin workshop,3D visual monitoring and human-computer interaction of the digital twin workshop was studied.First,a novel 6D model of the 3D visualization interactive system for digital twin workshops is proposed.As the traditional 5D digital twin model ignores the importance of human-computer interaction,a new dimension of the user terminal was added.A hierarchical real-time data-driven mapping model for the workshop production process is then proposed.Moreover,a real-time data acquisition method for the industrial Internet of things is proposed based on OPC UA(object linking and embedding for process control unified architecture).Based on the 6D model of the system,the process of creating a 3D visualization virtual environment based on virtual reality is introduced,in addition to a data-driven process based on the data management cloud platform.Finally,the 6D model of the system was confirmed using the blade rotor test workshop as the object,and a 3D visualization interactive system is developed.The results show that the system is more transparent,real-time,data-driven and more efficient,as well as promotes the coordination and integration of human-physical-virtual,which has practical significance for developing digital twin workshops.展开更多
In view of the lack of research on the information model of tufting carpet machine in China,an information modeling method based on Object Linking and Embedding for Process Control Unified Architecture(OPC UA)framewor...In view of the lack of research on the information model of tufting carpet machine in China,an information modeling method based on Object Linking and Embedding for Process Control Unified Architecture(OPC UA)framework was proposed to solve the problem of“information island”caused by the differentiated data interface between heterogeneous equipment and system in tufting carpet machine workshop.This paper established an information model of tufting carpet machine based on analyzing the system architecture,workshop equipment composition and information flow of the workshop,combined with the OPC UA information modeling specification.Subsequently,the OPC UA protocol is used to instantiate and map the information model,and the OPC UA server is developed.Finally,the practicability of tufting carpet machine information model under the OPC UA framework and the feasibility of realizing the information interconnection of heterogeneous devices in the tufting carpet machine digital workshop are verified.On this basis,the cloud and remote access to the underlying device data are realized.The application of this information model and information integration scheme in actual production explores and practices the application of OPC UA technology in the digital workshop of tufting carpet machine.展开更多
Single Sign-on(SSO)is an effective unified authentication and authorization mechanism that makes users access to all integrated applications that trust each other from one single-sign-on site.This paper starts from th...Single Sign-on(SSO)is an effective unified authentication and authorization mechanism that makes users access to all integrated applications that trust each other from one single-sign-on site.This paper starts from the basic principle analysis of CAS,a single sign-on solution.In order to solve the problems of complex permissions assignment and inflexibility of mounting existent applications,an extended CAS SSO solution,named Ext-CAS SSO,is proposed in a procedure of enterprise systems integration.Furthermore,this paper states the full structure,working protocol and concrete implementation of Ext-CAS SSO in different scenarios.At last,a questionnaire survey regarding the related systems is conducted to testify the user experience.展开更多
文摘Unified identity authentication has become the basic information service provided by colleges and universities for teachers and students. Security, stability, high concurrency and easy maintenance are our requirements for a unified identity authentication system. Based on the practical work experience of China University of Geosciences (Beijing), this paper proposes a high availability scheme of unified identity authentication system based on CAS, which is composed of multiple CAS Servers, Nginx for load balancing, and Redis as a cache database. The scheme has been practiced in China University of Geosciences (Beijing), and the application effect is good, which has practical reference significance for other universities.
文摘随着物联网与互联网融合的不断深化,感知层与应用层之间的互联互通要求不断提高。针对现有数据采集系统存在的规范性、扩展性和适应性不足的问题,文章提出一套基于对象连接与嵌入过程控制统一架构(object linking and embedding for process control unified architecture,OPC UA)协议的分布式数据采集处理系统架构。对数据采集处理系统各个模块进行功能解耦和架构重组,分别介绍该系统硬件和软件架构;针对发布订阅模式下负载的特异性,提出一种改进的适用于OPC UA分布式订阅的负载均衡算法;最后在某车企实例验证该系统架构。结果表明,基于OPC UA的分布式数据采集处理系统数据采集处理效果良好,证明了该系统架构的可行性及有效性。
文摘针对我国碳排放工业类型多、碳排放监测数据源多样的问题,设计了一个基于多源异构数据的能源电力碳排放监测诊断服务系统。系统由非分光红外探测技术、改进型微分粒子群算法(particle swarm optimization,PSO)、云计算、对象链接与嵌入统一架构(OLE for process control-unified architecture,OPC-UA)技术等构成。通过改进PSO算法来提高收敛速度,进一步提高数据监测和处理效率。采取OPC-UA技术实现对碳排放多源异构数据进行统一传输和反馈,极大地缓解了系统主机的计算压力。试验结果表明,经系统技术核算的数据误差率在可接受范围内,为其他技术研究奠定基础。
基金supported by Department of Science & Technology of Guangdong Province (No.2006A15006003)National High Technology Research and Development Program of China (863 Program)(No.2006AA04A120)
文摘The content security requirements of a radio frequency identification （RFID） based logistics-customs clearance service platform （LCCSP） are analysed in this paper. Then, both the unified identity authentication and the access control modules are designed according to those analyses. Finally, the unified identity authentication and the access control on the business level are implemented separately. In the unified identity authentication module, based on an improved Kerberos-based authentication approach, a new control transfer method is proposed to solve the sharing problem of tickets among different servers of different departments. In the access control module, the functions of access controls are divided into different granularities to make the access control management more flexible. Moreover, the access control module has significant reference value for user management in similar systems.
基金The National Natural Science Foundation of China(No.51875332)the Capacity Building Projects of Some Local Universities of Shanghai Science and Technology Commission(No.18040501600).
文摘To improve the human-physical-virtual coordination and integration of the digital twin workshop,3D visual monitoring and human-computer interaction of the digital twin workshop was studied.First,a novel 6D model of the 3D visualization interactive system for digital twin workshops is proposed.As the traditional 5D digital twin model ignores the importance of human-computer interaction,a new dimension of the user terminal was added.A hierarchical real-time data-driven mapping model for the workshop production process is then proposed.Moreover,a real-time data acquisition method for the industrial Internet of things is proposed based on OPC UA(object linking and embedding for process control unified architecture).Based on the 6D model of the system,the process of creating a 3D visualization virtual environment based on virtual reality is introduced,in addition to a data-driven process based on the data management cloud platform.Finally,the 6D model of the system was confirmed using the blade rotor test workshop as the object,and a 3D visualization interactive system is developed.The results show that the system is more transparent,real-time,data-driven and more efficient,as well as promotes the coordination and integration of human-physical-virtual,which has practical significance for developing digital twin workshops.
文摘In view of the lack of research on the information model of tufting carpet machine in China,an information modeling method based on Object Linking and Embedding for Process Control Unified Architecture(OPC UA)framework was proposed to solve the problem of“information island”caused by the differentiated data interface between heterogeneous equipment and system in tufting carpet machine workshop.This paper established an information model of tufting carpet machine based on analyzing the system architecture,workshop equipment composition and information flow of the workshop,combined with the OPC UA information modeling specification.Subsequently,the OPC UA protocol is used to instantiate and map the information model,and the OPC UA server is developed.Finally,the practicability of tufting carpet machine information model under the OPC UA framework and the feasibility of realizing the information interconnection of heterogeneous devices in the tufting carpet machine digital workshop are verified.On this basis,the cloud and remote access to the underlying device data are realized.The application of this information model and information integration scheme in actual production explores and practices the application of OPC UA technology in the digital workshop of tufting carpet machine.
文摘Single Sign-on(SSO)is an effective unified authentication and authorization mechanism that makes users access to all integrated applications that trust each other from one single-sign-on site.This paper starts from the basic principle analysis of CAS,a single sign-on solution.In order to solve the problems of complex permissions assignment and inflexibility of mounting existent applications,an extended CAS SSO solution,named Ext-CAS SSO,is proposed in a procedure of enterprise systems integration.Furthermore,this paper states the full structure,working protocol and concrete implementation of Ext-CAS SSO in different scenarios.At last,a questionnaire survey regarding the related systems is conducted to testify the user experience.
