基于汽车生产管控系统的授权委托模型的研究与应用

发布时间：2018-11-02 08:45

【摘要】：汽车生产管控系统,是为汽车零部件生产厂商量身定做,意在使这些企业的生产工作通过计算机技术实现自动化办公。这些企业的生产工作主要由两部分组成:日常的数据维护工作和工厂的生产流程工作。前者对诸如项目材料信息、财务信息、职工信息等企业生产中相关的数据进行维护和管理;后者则需要根据企业自身产品生产制造时的工艺特点,结合车间中可供调配的资源,合理调度生产,保证产品能够按时按量生产。而在企业生产工作当中,难免出现这样那样的原因导致员工无法继续行使当前职责或完成当前任务,如果对这个问题置之不理,可能对企业的日常工作和生产流程工作带来阻碍,甚至造成经济损失,同时也给系统安全造成极大威胁。在这样的情况下,为企业设计安全有效的授权委托功能,成为了开发当中确保系统正常运行的当务之急。对于一个企业生产管控系统而言,授权委托机制是保证系统正常运行不可或缺的一部分,它的核心功能是为在用户暂时或永久不能承担系统分配的职能时,提供一种安全有效地机制,将用户的权限转移给其他用户,代替行使其职责。对于汽车生产管控软件而言,在实施委托时,权限是否涉及工作流要区别考虑,窗体模块中不同粒度权限的转移也同样需要由模型区别控制。本文所研究的核心和重点,就是提出一种能服务于此类系统的授权委托模型。就目前而言,比较主流的委托模型主要有RBDM模型、TBDM模型、PBDM模型以及它们的扩展体、结合体等等。这些模型在以往的应用中发挥了各自的优点和长处,起到了很好的作用。但随着信息科技的发展和时代的进步,各软件系统的用户量、数据量等都呈指数增长,客户需求也呈多样化趋势,传统的委托模型在这样的情况下便显得不够灵活简便,对于新系统的适用能力也有一定不足,模型设计上都存在或多或少的缺陷。综上所述,本文立足于梯队的课题项目,并与企业具体需求相结合,通过对上述传统模型的研究与借鉴,提出了一种新的授权委托模型M-PBDM(Multi-Permission Based Delegation Model)。本模型首先对企业的组织架构进行抽象剥离,在系统中定义了角色、用户、任务等概念,并对系统中的权限加以区分,分为工作流相关权限集WP与工作流无关权限集NWP。基于这样的分类,在工作流相关权限集下的权限转移,是发生在用户获得的任务的基础上,权限的转移即用户任务的转移;而在工作流无关权限集下的权限转移,是发生在用户获得的角色的基础上,通过进一步区分可转授权限集与不可转授权限集,粗粒度权限集和细粒度权限集等,进行用户权限的转移委托。通过一段时间的实践和改进,该模型在汽车生产管控软件得到了很好的应用,降低了系统风险,提高了系统的可用性和安全性。
[Abstract]:The automobile production control system is tailor-made for the automobile parts manufacturers, which is intended to automate the production of these enterprises through computer technology. The production of these enterprises mainly consists of two parts: daily data maintenance and factory production process. The former carries on the maintenance and the management to the related data such as the project material information, the financial information, the staff information and so on in the enterprise production; In the latter case, according to the process characteristics of the production and manufacture of the enterprise's own products, combined with the resources available for deployment in the workshop, the production should be reasonably scheduled to ensure that the products can be produced on time and according to the quantity. In the production work of an enterprise, it is inevitable that one reason or another will result in employees being unable to continue to exercise their current duties or to complete their current tasks. If this problem is ignored, It may hinder the daily work and production process of enterprises, even cause economic losses, but also pose a great threat to the security of the system. In this case, the design of a secure and effective delegation of authority for enterprises has become an urgent task in the development process to ensure the normal operation of the system. For a production control system of an enterprise, delegation mechanism is an indispensable part of ensuring the normal operation of the system. Its core function is to enable the user to temporarily or permanently fail to undertake the functions assigned by the system. Provides a secure and effective mechanism to transfer user rights to other users instead of exercising their responsibilities. For the automobile production control software, whether the authority involves workflow should be considered differently, and the transfer of different granularity permissions in the form module also needs to be controlled by the model. The core and key point of this paper is to propose an authorization delegation model which can serve this kind of system. At present, the mainstream delegation models mainly include RBDM model, TBDM model, PBDM model and their extender, combination and so on. These models have played a good role in the past applications. However, with the development of information technology and the progress of the times, the number of users and the amount of data of each software system are increasing exponentially, and the customer demand is also diversified. Under such circumstances, the traditional entrustment model is not flexible and simple enough. The applicability of the new system is also inadequate, and the model design has more or less defects. To sum up, this paper bases itself on the project of echelon and combines with the specific needs of enterprises. Through the research and reference of the traditional model mentioned above, a new authorization delegation model M-PBDM (Multi-Permission Based Delegation Model).) is put forward. This model firstly abstracts the organizational structure of the enterprise, defines the concepts of role, user and task in the system, and distinguishes the permissions in the system, which is divided into workflow related privilege set WP and workflow independent permission set NWP.. Based on this classification, the transfer of authority under the relevant permission set of workflow occurs on the basis of the task acquired by the user, and the transfer of authority is the transfer of the user task. On the basis of the role acquired by the user, the privilege transfer under the workflow independent permission set is based on the distinction between the transferable permission set and the non-delegated permission set, the coarse-grained permission set and the fine-grained permission set, etc. Delegate user authority transfer. Through practice and improvement for a period of time, the model has been applied to the automobile production control software well, reducing the system risk and improving the usability and security of the system.
【学位授予单位】：吉林大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：F426.471;TP311.52

【相似文献】