The Study Of Access Control Problem Based On Manufacturing Grid

Along with the development of the compute and information technology, Grid is the third generation of Internet's application following traditional Internet and WWW. The grid attempts to realize overall combination of all resources on Internet, and it finally will realize make resources to be shared and work to be done together on the fictitious environment of the network. And grid is the more advanced form of Internet's development. After our country joining the WTO, networked manufacture has become one of main means of the establishing process of information system for manufacturing industry. And the grid technology becomes best choice to develop and meet the networked manufacturing systems. With the grid technology being deeply applied to manufacture, manufacturing grid-this new manufacturing mode will arise at the historic moment.Under manufacturing grid environment it is emphasized for service that is supported by the shared manufacturing resources. These service and resource can stride over many enterprises and systems. But different enterprises and systems may entirely vary in the demands of the access control and adopting policies of access control. So access policy of manufacturing grid need to think of local policy and also realize an overall access control, its security is especially important. But there is still not a perfect method to solve it.This paper studies specifically the access control problem to manufacturing grid environment. First, the paper analyzes present situation and direction of grid, manufacturing grid and access control technique. And by learning of access control's fundamental theory and RBAC (role based access control) model, it analyzes the demand characteristics of access control under manugacturing grid. At the seme time, it study cuurent grid security scheme such as GSI (Globus Security Infrastructure) and points out its some shortage. Then, it expands RBAC according to manufacturing grid, and user's access policies can be defined in the manufacturing grid by using "role" and "authorization service".Consequently it presents access control mechanism combining overall role-based access control and local authorization service. Moreover it constructs access control model under manufacturing grid environment, and verifies its security by means of formalization. Finally, it analyses and designs detailedly the integral structure, the function of every module and its communication in the model system. It also introduces its whole realizing process. Moreover it evaluates its function and capability. To sum up, it realizes the secure access control under manufacturing grid by means of RBAC and XACML (extensible Access Control Markup Language) based authorization service.