提出一个专门针对协同环境下CAD模型的多层次动态的安全访问控制fmulti—levelanddynamicsecurityaccesscontrol,简称MLDAC)模型.该模型利用一种多层次的权限模型,以简化权限定义及其分配过程,丰富了权限表达能力,实现了产品模型的多粒度访问控制.通过参照工作流的基本理念,引入权限的依赖关系及权限状态迁移概念,实现了权限的动态授权管理.通过实践证明,MLDAC模型可以对协同设计操作进行更加有效的控制,符合设计任务间的分工性、依赖性和交互性的特点.
In this paper, a multi-level and dynamic security access control (MLDAC) model is proposed for CAD models in collaborative environment. A multi-level privilege model is developed to simplify the process of permission definition and assignment for enriching the expression ability and helping to realize multi-grained access control. The dependent relation of permission and the permission state migration are brought into MLDAC for dynamic authorization management based on the basic theory of workflow. Based on the practice, MLDAC model is more efficient to control collaborative operations. It meets the characters of design tasks, i.e. divisible, dependent and interactive.