Research Of Role-Based Access Control And Its Application In CAD Collaborative Design

CAD (Computer Aided Design) is a technology to manage the product-related information and process. Based on the study and research of the software SolidWorks for CAD, this paper proposes a new permission control model in the software by analyzing the demands and deficiency of traditional permission control in CAD.Firstly, the paper introduces the research background of permission control in CAD and analyzes the deficiency of home and abroad research. Then through discussing related theory of permission control and RBAC (Role-Based Access Control) technology, it puts forward that RBAC-based permission control in CAD is the research direction.Secondly, the paper analyzes and studies the demand and the objects of permission control in CAD, bringing forward the concept of a attribute restricted delegation model. The RBAC model was bring forward under the background of centralize, so it doesn't adequate in large-scale cooperative design system. The management of the system plays a very important role in the cooperative environment. It would increase the management load of the system if all the authorization were completely depend on the system manager. The paper propose an Attribute Restricted Delegation Model, and introduce attribute into delegation model, thus make an attribute restricted user to user delegation model. The model can ensure the security of user to user delegation by improving on the delegation operation.Finally, we programmed by object-oriented program language Visual C++ 6.0 for SolidWorks software applying the research and the theory. This paper gives a real application case and the implementation. After a through analysis of the case, it addresses the importance of attribute in delegation to show the importance of introduces attribute into delegation. By testing, it shows that this system is strict and flexible in authorization, avoiding exceeding the authority effectively, implementing security control to one data cell, adding the granularity of data access, ensuring data security and can meet the needs of practice perfectly.