Research On Authority Management System For New Intelligent Building Platform

In recent years,with the rapid development of emerging technologies such as artificial intelligence,internet of things and big data,and the building intelligent industry has developed rapidly.However,the currently widely used centralized system architecture is not ideal for automation and control,problems such as the difficulty of on-site configuration of the system,the difficulty of system transformation and upgrade,and the difficulty of implementing cross-system functions are becoming increasingly prominent.In order to solve this problem,relevant domestic scholars have broken through the constraints of the traditional architecture,and took the new architecture of the building intelligent system as an innovation point to build a brand-new set of flat and decentralized building intelligent platforms.In this platform,each building space unit and device is associated with an "intelligent node",which is also called CPN(Computing Process Node),CPN node contains standard information set of personnel,space environment and various equipment data.The data in the standard information set is critical to the safe operation of the platform.Therefore,research on the Authority of the data in the CPN standard information set is a key issue that cannot be ignored during the operation of the platform,and provide security for platform data.This thesis is oriented to the new intelligent building platform,the data operation authority of the CPN standard information set is studied,and the main tasks are as follows.Firstly,study the data read and write authorizations in the CPN standard information set.This thesis starts from the four management dimensions of building life cycle stage,building type,role and scenario,these combining the user's operation type and request action area,from data directly read and write and tasks perform two aspects to analyze the specific authority of the CPN standard information set.Through the classification of CPN standard information set read and write requests,the basis for determining the user's authority is clear.Secondly,establish a role-based multi-dimensional access control model.This thesis improves the classic role-based access control model,and create an authorization judgment feature set that includes building life cycle stages,building types,roles and scenarios,according to the user's operation type and action area,through the iterative calculation of the CPN node,the user's read and write authorization for the data is finally determined.When the feature set changes,a dynamic authorization mechanism is introduced,allows user's authorization to be upgraded or downgraded within the wired range according to changes in the set,ensure that when the feature set changes,the user's authority can not only meet the building's operating requirements,but also be constrained with in a safe and reasonable range.Finally,develop a laboratory management system that containing the role-based multi-dimensional authority management model.The system uses Browser and Server architecture,deploying server-side programs to all CPN nodes to ensure that all users can access the network through any node.During the data request process,each node verifies the user's standardization and security of the data response.Use DSP distributed simulation platform to simulate the process of user's data operation and task execution when the feature set is unchanged,and the process of node dynamic authorization according the model when the feature set is changed.It has been verified that the model has strong flexibility and high availability,and can guarantee the safe access to the CPN standard information set.Figures [44] Table [9] Reference [59]...