资源描述:
《development of an access control model, system architecture and approaches for resource sharing in virtual enterprise》由会员上传分享,免费在线阅读,更多相关内容在工程资料-天天文库。
1、ComputersinIndustry58(2007)57–73www.elsevier.com/locate/compindDevelopmentofanaccesscontrolmodel,systemarchitectureandapproachesforresourcesharinginvirtualenterpriseTsung-YiChena,b,Yuh-MinChena,*,Hui-ChuanChuc,Chin-BinWangdaInstituteofManufacturingEngineering,NationalChengKungUniversity,Tainan,Ta
2、iwan,ROCbDepartmentofElectronicCommerceManagement,NanHuaUniversity,Chia-Yi,Taiwan,ROCcNationalUniversityofTainan,Tainan,Taiwan,ROCdDepartmentofInformationManagement,NanHuaUniversity,Chia-Yi,Taiwan,ROCReceived8September2005;accepted21April2006Availableonline15June2006AbstractSecureinformationshari
3、ngisoneofkeyfactorsforsuccessofvirtualenterprise(VE).ThestudyidentifiesthecharacteristicsofaVEandanalyzestherequirementsofaVEaccesscontrol.AVirtualEnterpriseAccessControl(VEAC)modelisproposedtohandleresourcemanagementandsharingacrosseachparticipatingenterprise,whichconsistsofaProject-basedAccessCo
4、ntrol(PBAC)sub-modeltomanagepublicresourcesandaRole-basedAccessControl(RBAC)sub-modeltomanageprivateresources.ThearchitectureofaVEACmodel-basedsystemisdevelopedandconsistsofthreecoremechanismsincludingtheVirtualEnterpriseAccessControlCenter(VEACC),SecurityGatekeeper(SG)andGlobalCertificateAuthorit
5、yCenter(GCAC).Basedonthesystemarchitecture,thestudyproposescertificateauthentication,userauthorityandaccesscontrolapproachestoidentifyuser’sidentityon-line,updateandsearchuserauthoritylists,andaccessprivateandpublicresources.Theresultsofthisstudywillfacilitatemoresecureresourcesharing,andovercomec
6、ooperationbarrierfromtrustamongparticipatingenterprisesinVE.#2006ElsevierB.V.Allrightsreserved.Keywords:Virtualenterprise;Informationsharing;RBAC;Accesscontrol;Certificateauthority1.Introductionareessentialintheeraofinternet.Forinstance,anewautomobilemodelisdevelopedbyavirtualenterprisethatVirtual
7、enterprise(VE)isanetworkofindependent,involvesapproximately20,000designersandengineersfromgeographicallydispersedadministrativebusinessdomainsthathundredsofdivisionsanddepartments,someofwhichareincooperatebysharingbusi