O-TRBAC模型在PLM系统中的访问控制权限管理设计与研究

发布时间：2018-10-07 21:12

【摘要】：计算机技术的快速发展促使了访问控制技术的日趋完善,使得访问控制技术被应用于越来越多的领域,包括军事、商业或企业管理系统等。访问控制技术是企业内部或企业之间数据共享的重要保障,也是数据安全得到保护的重要支撑。PLM系统是目前中小型企业中应用较为普遍的管理系统,其核心理念是基于产品的生命周期,即从产品的研发、使用直至产品的终结这样一个过程。PLM系统的优点是能够集成与产品相关的信息资源,将资源整合利用。该系统与访问控制技术相结合,定义了相关的约束条件,设置了系统访问权限,使系统资源受到了合理的保护。本文以长春某公司的零部件制造PLM系统的实际需求为背景,对其系统的权限配置以及权限管理进行研究和分析。本文工作归纳如下:(1)总结了当前中小型制造企业管理系统的特点以及安全性的要求,介绍了几种主流的访问控制模型的基本思想和特点。(2)结合了访问控制技术的发展趋势、RBAC模型和TBAC模型的优点以及PLM系统自身的需求,提出了一种基于组织架构、基于任务和角色且支持动静结合授权的企业系统权限管理模型-“O-TRBAC访问控制模型(Organization-Task-based Access Control)”,并对该访问控制模型的基本要素和思想进行了了详细阐述。(3)基于O-TRBAC模型,开发了较为完整的访问控制机制,包括用户管理、角色的定义与划分、授权管理以及按项目生命周期动态分配权限等内容,并设置了客体资源的访问级别,对虚拟角色的继承增加了约束,针对权限的可控范围和属性进行了粒度级别划分,并对数据和任务的有效性增加了时间约束,从而实现高效、灵活、安全的权限管理。(4)给出权限配置与管理的具体实现细节,包括应用框架、开发平台选择以及数据库表结构等。
[Abstract]:With the rapid development of computer technology, access control technology is becoming more and more perfect, and access control technology has been applied in more and more fields, including military, commercial or enterprise management systems. Access control technology is an important guarantee of data sharing within or between enterprises, and also an important support for the protection of data security. PLM system is a common management system used in small and medium-sized enterprises at present. The core idea is based on the product life cycle, that is, from the product development, use until the end of the product such a process. The advantage of the PLM system is that it can integrate the information resources related to the product and integrate the resources. Combined with the access control technology, the system defines the relevant constraints and sets the system access rights, so that the system resources are protected reasonably. Based on the actual requirement of parts manufacturing PLM system of a company in Changchun, this paper studies and analyzes the privilege configuration and management of the system. The work of this paper is summarized as follows: (1) the characteristics and security requirements of the management system of small and medium-sized manufacturing enterprises are summarized. This paper introduces the basic ideas and characteristics of several mainstream access control models. (2) combined with the development trend of access control technology, the advantages of RBAC model and TBAC model, as well as the requirements of PLM system itself, a kind of organization architecture is proposed. The O-TRBAC access control model (Organization-Task-based Access Control), which is based on tasks and roles and supports dynamic and dynamic authorization, is described in detail. (3) based on the O-TRBAC model, the basic elements and ideas of the access control model are described in detail. A complete access control mechanism is developed, including user management, definition and division of roles, authorization management and dynamic allocation of permissions according to the project life cycle, and the access level of object resources is set up. Constraints are added to the inheritance of virtual roles, granularity levels are divided according to the controllable scope and attributes of permissions, and time constraints are added to the validity of data and tasks, thus achieving high efficiency and flexibility. (4) the implementation details of authorization configuration and management are given, including application framework, development platform selection, database table structure and so on.
【学位授予单位】：吉林大学
【学位级别】：硕士
【学位授予年份】：2017
【分类号】：TP311.52;TP309

【参考文献】