【作者】 王成良；

【导师】 何玉林；

【作者基本信息】 重庆大学 ， 机械制造及其自动化， 2001， 博士

【摘要】 现代制造系统以数字化、网络化、虚拟化、智能化、绿色化以及集成化为主要特征，通过柔性的、协同的、敏捷的先进制造技术以提高企业快速响应市场的能力，使企业在市场竞争中立于不败之地。而实现这些先进制造技术离不开建立在计算机技术、信息技术、网络技术、自动化技术之上的有软、硬件系统组成的制造企业信息集成平台。由于以前人们在构建制造企业信息集成平台时，安全性方面较少考虑，对其进行的研究往往是“一般性”安全原则的讨论。在不断发生计算机安全事件的今天，研究制造企业信息集成平台的安全性无疑具有重要意义。本文首先讨论了制造企业信息集成平台存在的若干安全性问题，并源于企业实际安全需求，对制造企业信息集成平台电子文档安全存储、WEB页面资源访问控制、网络化协作制造数据在企业之间的安全同步这三个方面分别进行了研究，建立了相应的原型系统，并进行了有关验证和实施。论文研究的内容及取得的成果如下：(1) 针对制造企业信息集成平台的特点，结合制造企业的相关情况，系统地分析了信息集成平台中存在的安全性问题和有关的防范措施。(2) 针对制造企业信息集成平台中电子文档安全存储要求，采用加密和压缩技术，将电子文档作为大型数据库中某种特殊属性对象来存储，以数据库方式对企业电子文档进行集成的、统一的管理，提出一种访问控制的增强型安全设计原则，基于此原则建立了管理授权和推荐式授权的安全访问机制，用以提高系统的访问安全性，并大大减少授权管理维护量；研究了特殊属性对象的数据库存储机理，从而构造一种快速存储、访问和检索电子文档的方法，使得企业信息集成平台的电子文档获得安全、可靠、快速的访问。(3) 提出了基于WEB页面方式的制造应用系统用户界面下，用户的安全登录、对同一个页面上的资源访问进行控制、控制超链接锚点链接信息的泄漏、控制浏览器书签功能对页面的访问等页面资源访问控制安全措施。(4) 针对网络化协作制造数据在企业之间进行的安全同步技术进行了研究，提出了一种基于Agent的远程访问数据安全同步模型。该模型通过构建远程拨号通讯方式，采用远程过程调用技术，从数据库中自动提取需要同步的重要敏感制造数据加密压缩后进行安全传送，实现了制造数据的安全同步，具有实现成本低、伸缩性强、安全可靠的特点。(5) 对本文研究的内容进行了原型系统的开发，以柳工863/CIMS应用示范工程和自贡高压阀门股份有限公司技改项目作为工程应用对象，取得了较好的效果。更多还原

【Abstract】 The main features of modern manufacturing system include digitalization, network , virtualization, greenization and integration. Employing flexible, synergic and agile advanced manufacturing technology a enterprise can enhance its ability to respond quickly to market and have an edge on market competition. However, it is impossible to realize these advanced manufacturing technologies without manufacturing enterprises information integrated platform , consists of software and hardware system, based on computer technology, information technology, network technology, automation technology. Previously, people considered little of the security of information integrated platform in manufacturing enterprises and the study in this field was only confined to the discussion of general security principles. Since computer security events occurred frequently, the security problem research of information integrated platform in manufacturing enterprises is undoutedly significant.first of all, the concept of the information integrated platform in manufacturing enterprises is produced and various security problems about it are discussed in this paper. Secondly, with practical enterprise’s security requirements, three security problems including the safe storage technology of electronic documents on information integrated platform in manufacturing enterprises, the access control of web page resources and the safe synchronization of network manufacturing data among enterprises are researched respectively and the corresponding prototype systems are built. The main contents and achievements of this paper are the following:(1) The framework of the information integrated platform in manufacturing enterprises is produced and the security problems and related protected measures are analyzed systematically according to the features of the information integrated platform in manufacturing enterprises and the actual condition of manufacturing enterprises.(2) Aiming at the requirement of safe storage of the electronic documents on the information integrated platform in manufacturing enterprise, using encryption/decryption and compression/uncompression techniques and saving the electronic documents as some special attribute object of large database and managing the enterprise electronic documents effectively through database, a safe access mechanism of functional grant <WP=7>and recommendatory grant to decrease grant management maintenance cost is proposed and the storage mechanism of special database attribute object is studied and the method for saving , accessing and retrieving electronic document quickly is constructed. Thus these methods can make the electronic documents of information integrated platform in manufacturing enterprises get safe, reliable and quick access.(3) According to this circumstance in which web pages are selected as the user interface of manufacturing application system, the safe measures of access control over web page resources are provided. These measures include how a user to log in manufacturing application system under web pages, how to control the resource access on the same web page, how to control the divulgence of the anchor link information of the hyperlink and how to control browser bookmark function’s access to old pages.(4) The safe synchronization technique of the network cooperative manufacturing data among enterprises is studied and based on Agent, the safe synchronization model of remote access data is produced. This model has realized the safe synchronization of manufacturing data by constructing remote dialing communication mode, adopting remote procedure call techniques, automatically extracting important sensitive manufacturing data from database requiring synchronization and safely transferring them after encryption. The features of this model are low cost, strong scalability, safe and reliable.(5) The prototype systems about related researchful contents are developed in this paper and it has proved to be a valuable way by applying them to practical 863/CIMS demonstration projec更多还原