面向飞机制造过程的统一用户管理体系及策略

为解决航空制造企业制造过程信息安全管理困难的问题,在综合分析飞机制造过程对身份认证和访问控制需求的基础上,应用单点登录及访问控制技术,构建了面向飞机制造全过程的统一用户管理体系。该体系包括了统一身份认证管理系统和统一访问控制管理系统。重点对基于单点登录的统一身份认证策略和基于规则-任务-角色的统一访问控制策略(Rule-Task-Role Based Access Control,RTR-BAC)进行了详细地探讨,并在此基础上建立了统一用户管理信息模型。统一用户管理体系将分散的用户管理功能从各应用系统中独立出来,形成统一可配置的用户管理模块,实现了对飞机制造过程用户信息的统一管理。

Aircraft manufacturing process oriented unified user management system and strategy

To solve the problems of information security management in aircraft manufacturing process,an Aircraft Manufacturing Process oriented Unified User Management System(AMP-UUMS)is promoted based on the analysis of the needs of authentication and access control in aircraft manufacturing process,by distilling user management function from application systems.This system consists of two parts:unified user authentication system and unified access control system.Single Sign On(SSO)based unified user authentication police and Rule-Task-Role Based Access Control(RTR-BAC)Strategy are discussed in detail.Furthermore,a unified user management information model is established to provide user information for AMP-UUMS.This paper provides a more efficient and safer method for user management.