Research On Application Of UCON_PMI Architecture In Supply Chain System

Information security is an inevitable question in a variety of network applications. Identity authentication, rights management and access control are important parts of information security. Privilege Management Infrastructure is put forward after PKI was proposed and solved the trust and unified authentication problems, and its purpose is to solve a unified rights management and access control. Rights management and access control are inseparable. In the access control field, Usage Control proposed in 2003, which provide a multi-faceted and unified framework for the protection of resources, can better meet the security needs of modern information systems.In this paper, based on the analysis of information security in supply chain system, information security framework of supply chain system is proposed from the perspective of the core enterprise. Three-tier structure is analysed and the main functions of information security framework are proposed. In the information security framework PMI components, UCON_PMI consists of property management and access control components to provide unified certificate management, rights management and access control decision functions for supply chain by adopting UCONpreABC model. Moreover, this paper describes implementation process of property management and access control components in supply chain system, and describes the authorization access policy of UCON_PMI system in supply chain system based on the Extensible Access Control Markup Language.