The Design And Implementation Of Access Conctrol In Product Data Management System

Product Data Management (PDM) technology, based on software technology, provides the mechanism of management and controls all the data related to product information and process. PDM has been widely used in enterprise product design and manufacturing. PDM system provides an integrated enterprise working environment for employees and manages all the data related to the product life cycles. How to protect the integrity, security and accuracy of the data is an important issue in the application and research of PDM system.Access control is an important technology to protect the security of the information system. Domestic and foreign scholars and computer technicians have deeply researched this area, but the application and research of access control in PDM system are not perfect. There are a lot of problems to be solved in PDM system, such as inefficient and administratively cumbersome, which are caused by huge amount of data, fine-grained control of data and too many user levels. This paper analyzes the requirement of access control mechanism in PDM system, proposes a PDM system access control model, designs the functions and core algorithm and implements the access control functions. The main contributions of this work include the following parts:Firstly, we have reviewed and analyzed the existing access control technology and classic access control models such as Discretionary Access Control, Mandatory Access Control and Role Based Access Control.Secondly, we have analyzed the requirement of PDM system access control modules and proposed an access control model for PDM system. This model uses user group hierarchy instead of role hierarchy to decrease permission configuration data and introduces permission hierarchy to manage data permission. The model is designed to solve the problems such as inefficient and administratively cumbersome, caused by huge amount of data, fine-grained control of data and too many user levels.Thirdly, PDM system access control model functions have been designed, such as administrative function, which includes creation and maintenance of element sets and elements relationship, and system function which includes creation and maintenance of user session and access decision. Algorithms such as function permission calculation and data permission calculation have also been proposed.Finally, PDM system access control function has been implemented based on proposed model, functions and algorithms.