PLM系统的层级式访问控制模型研究

面对PLM/PDM系统应用中提出的管理和安全需求,建立了基于上下文的层级式管理框架及其权限控制模型。控制模型包括主体、角色、权限、访问控制规则、类型和实例要素,支持功能权限和实体权限分离,支持类型ACL和实例ACL定义和管理,给出了权限定义和权限计算的过程和方法,实现了对PLM/PDM数字资源的层级式、细粒度访问控制。所建模型已在航天型号协同研制平台(AVIDM)中应用。

Research on Hierarchical Access Control Model for Product Lifecycle Management

With the security requirements set forth in PLM system, a hierarchical management framework based on context was established, and the access control model in the framework was given out. The access control model includes users, roles, permissions, access control rules, types and objects, which supports functional privilege and object privilege separation, supports ACL definition and management for type and object, and permission process and permissions calculations was brought up. The model helps to realize hierarchical digital resources, fine-grained access control in PLM. The proposed model has been developed in aerospace applications（AVIDM）.