关键词: 制造网格, 社区授权服务, 基于角色的访问控制, 安全

Abstract: Based on the Community Authorization Service （CAS） architecture, an access control solution was proposed to satisfy the inherent natures of the Manufacturing Grid (MG), such as open architecture, dynamic organization and complicated business processes. In this solution, the Manufacturing Grid Access Control (MGAC) model extended the Role-based Access Control (RBAC) model. In the MGAC model, global fine-grained policies were used to authorize users' global privileges. Enabled privileges could be adjusted according to the current project state. The local coarse-grained access control policies were used to define the privileges of the shared services. The authorization decision was made by a local service node based on the local access control polices and the global privileges of users. The implementation in Shanghai High Institutions Grid proved that the access control model could support the dynamic authorization and local management and improve the security of MG.

Key words: manufacturing grid, community authorization service, role-based access control, security