Research On A Framework Of The Migration Of Organization Structure-driven Enterprise Permission Model

At present, with the increasing of sub-systems of enterprise informa- tion system within the enterprise and the constant annexation and reorganization of enterprises, more and more companies need to integrate the original isolated subsystems and external systems together through a unified mode. Under this background, the technology enterprise application integration (EAI) came into being. It integrates the heterogeneous application based on different platforms or programs into a unified framework. However, in the implementation process of the application integration, because of the complexity of the model's structure and information, it often occurs to people that it loses the semantics and information of the model in the integration. Although the existing model has been defined in the original system, it needs to redefine the existing model according to the interface standard of the new system due to the heterogeneity among different models. It has greatly increased the cost of the enterprise modeling. And it is not conducive to reuse the information of the original model.To solve these problems, a platform framework for the migration of enterprise permission models which is based on the flexible organization structure is proposed. First, the framework defined the enterprise organization structure with multi-dimension modeling method based on the custom flexible organization structure model. Then, we expand the semantic information of the model, and establish the mapping relationship between the organization structure models, roles, permissions and resources. All these steps have finished the definition of the enterprise permission model. Next, the permission model is applied to the multi-view modeling and access control of enterprise permissions. At last, permission models are migrated into the external system's application with the framework.The main research work completed is as follows:(1) The modeling approach oriented to the flexible organization structure from a multi-dimensional perspective has been proposed. It has given the more accurate definition of the current complex organization structure model from responsibilities division, geographic distribution, products orientation, groups and time five dimensions. And maintain the inheritance and relevance between units within constructed organization structure models. At the same time, the approach provides support for the permission model with establishment of mapping of user-to-organization structure and organization structure-to-role. Besides, it can adapt to specific needs through adding the semantic information for the flexible organization structure.(2) The multi-view modeling method driven by flexible organization structure has been researched. It completed the modeling process of other resource model view guided by organization structure view. Then, we can use these constructed resource models establish the control process view which achieved the purpose of modeling of the enterprise models.(3) Based on XACML language specification, the flexible organization structure's application scenario has been built. It is implemented by adding flexible organization structure processor into XACML access framework. The processor receives more accurate position and constraint information of the user and resource within the organization structure through user-defined mapping relationship among user, resource, environment and organization structure. And it helps the decision-making system to make effective and rapid response to the request.(4) The definition of the storage mode and associated mapping relationship of the permission model has been completed. It establishes model dictionary oriented to the permission model first. Then, the mapping relationships among the organization structure, role and permission are built by defining the flexible organization structure template file. Next, the system communicates with external system to receive the interface standard, and converts the file format in order to finish the migration of permission models.(5) Based on the Eclipse development environment, a prototype system which is designed to implement permission model modeling and migration has been constructed. Then, the feasibility and effectiveness are verified by an instance of adding new department for the enterprise.Prototype system's implement and the result of the case study have showed that the proposed migration framework improved reusability and reliability of the enterprise models, and has some reference value and application prospect.