PDM系统间的安全交互模型

现有的用户名/密码等访问控制机制在交互时存在着很大的安全缺陷.为了更有效地满足企业产品数据管理(PDM)系统安全交互的需求,在现有企业PDM系统的通用安全管理模型的基础上,提出并设计实现了基于公钥证书的属性证书模型-AA代理模型.新模型依据TTP(可信第三方)的结构来传递企业间的信任关系,增强了企业协作的自动化,减少了交互的成本.它不仅实现了可靠的身份鉴定和安全的数据传输,同时也实现了灵活的访问控制和安全审计功能,有效地解决了企业信息交互的问题,可用于汽车、电子、机械等制造行业.

Secure information exchange model between PDM systems

With the development of collaboration among enterprises, it is very desirable to securely exchange information between PDMs through Internet. The original user/password mechanism is very weak, unsecure and inflexible. And also,authorization based on PKC(public key certificate) cannot satisfy the temporary relations between enterprises. In order to satisfy the demand of secure information exchanges between enterprises, according with the genernal security management model of PDM system, This paper designed an AC(attribute certificate) model based on PKC. The model was based on TTP architecture to achieve trust between enterprises and automation of enterprises' collaboration, and reduced the startup cost. And it provides not only reliable authentication and data protection, but also flexible access control and secure audit, and effectively implements information exchanges between enterprises. The new model can be well used in the fields of automobile manufacture,electronics,mechanics and so on.