面向网络化制造系统的用户访问控制研究

针对网络化制造系统的安全和管理问题，集成了基于角色的访问控制（RBAC）、基于任务的访问控制（TBAC）、关系驱动的访问控制（RDAC），以及基于企业联盟的访问控制（CBAC）方法，提出了一种综合访问控制模型。模型包括网络化制造系统的用户和资源层次关系模型、访问控制参考模型和访问控制过程模型，定义了各模型中的相关元素和关系，给出了各级约束验证和授权的表达，并利用可扩展的访问控制标记语言（XACML）实现了该方法。在绍兴轻纺区域网络化制造系统中的应用结果表明，该方法有效地减轻了系统安全维护与管理的代价。

User access control for networked manufacturing system

Aimed at the security and management issues in networked manufacturing system,an integrated user access control model was proposed based on analysis of role-based access control(RBAC),task-based access control(TBAC),relationship-driven access control(RDAC) and coalition-based access control(CBAC).The model includes the hierarchical user relationship model,the reference model and the process model,defines the elements and their relationships,and gives the expressions of constraints authorization.The extensible access control markup language(XACML) was used to implement this method.Application in the networked manufacturing system in Shaoxing spinning region shows that the integrated user access control method can reduce the costs of system security maintenance and management.