网格化制造模式中面向联盟协同的安全体系及技术

• 论文 •

网格化制造模式中面向联盟协同的安全体系及技术

刘敏，严隽薇，王坚

同济大学 CIMS研究中心，上海 200092

收稿日期:2005-03-21 修回日期:2005-05-10 出版日期:2006-03-15 发布日期:2006-03-25
基金资助:
国家科技攻关计划资助项目（2005BA908B10）；上海市科技发展基金重大项目（05dZ05810）。

Collaboration-oriented security architecture & technologies in grid-based manufacturing pattern

LIU Min, YAN Jun-wei, WANG Jian

CIMS Research Cent., Tongji Univ., Shanghai 200092, China

Received:2005-03-21 Revised:2005-05-10 Online:2006-03-15 Published:2006-03-25
Supported by:
Project supported by the National Key Technologies R&D Program,China(No.2005BA908B10)and the Shanghai Science & Technology Development Foundation,China(No.05dz05810).

摘要/Abstract

摘要： 安全网际协议、安全套接层协议、安全简单对象访问协议和记录级等多层次的安全通信协议及基于公钥基础设施，建立了网格化制造模式下面向联盟协同的安全体系架构。通过基于安全网际协议的虚拟专用网技术、安全的电子商务交易与协作、软件或单据的签名加密、安全电子邮件等实现技术与方法，为联盟企业合作伙伴开展网格化制造模式下的商务协同、设计协同、制造协同和供应链协同提供了全面的安全保障。

关键词: 网格化制造, 虚拟组织, 安全体系, 数字证书

Abstract: Based on Internet Protocol Security (IPSec), Secure Socket Layer (SSL), Simple Object Access Protocol Security (SOAPSec) and Public Key Infrastructure (PKI), the collaboration-oriented security architecture for partners cooperation in grid-based manufacturing pattern was constructed. The enabling technologies including IPSec based Virtual Private Net (VPN), secure e-business and cooperation framework, digital signature and encryption of software or some important documents such as an order, and Secure Multipurpose Internet Mail Extensions (S-MIME) and Cryptographic Message Syntax (CMS) based secure email were discussed in detail. The architecture and the enabling technologies provided the security mechanism amongst the partners to realize business collaboration, design collaboration, manufacturing collaboration and supply chain collaboration in grid manufacturing pattern.

Key words: grid-based manufacturing, dynamic alliance, security architecture, digital certificate

中图分类号:

TP309
TP393

刘敏，严隽薇，王坚. 网格化制造模式中面向联盟协同的安全体系及技术[J]. .

LIU Min, YAN Jun-wei, WANG Jian. Collaboration-oriented security architecture & technologies in grid-based manufacturing pattern[J]. .

参考文献

［1］ MIN Jie, YAN Chunlong,YE Ming, et al. A new mode of network economics-direct customization facing the customer［J］.China Soft Science,2001,(6):53-56(in Chinese).［闵捷，颜春龙，叶明,等.网络经济新模式— 面向顾客的直接定制［J］.中国软科学，2001，（6）：53-56.］

[2] ZHANG Zhiyong, LIU Shirong, CHENG Tao, et al. Study on strategy of resource reconfiguration for networked manufacturing system［J］. China Mechanical Engineering, 2002, 13(1):76-80(in Chinese).［张智勇，刘世荣，程涛，等.网络化制造系统中资源快速重组的策略研究［J］.中国机械工程，2002，13（1）：76-80.］

[3] GU Xinjian, XU Xianghong,CHEN Zichen. Research on network-based manufacturing paradigm［J］.China Industrial Economy, 2001,(1):30-33(in Chinese).［顾新建，徐向宏，陈子辰.网络化制造范式和我国的网络化制造战略［J］.中国工业经济，2001，（1）：30-33.］

[4] DAN Bin, LIU Fei. Research on networked integrated manufacturing and the system［J］. Systems Engineering and Electronics, 2001, 23(8): 12-15(in Chinese).［但斌，刘飞.网络化集成制造及其系统研究［J］.系统工程与电子技术，2001，23（8）：12-15.］

[5] FOSTER I，KESSELMAN C, NICK J,et al. The physiology of the grid: an open grid services architecture for distributed systems integration［EB/OL］.http://www.globus.org/research/papers/ogsa.pdf,2002.

[6] FOSTER I,KESSELMAN C, NICK J, et al.Grid services for distributed system integration［J］. IEEE Computer, 2002, 35(6):37-46.

[7] GLOBUS. Overview of the grid security infrastructure［DB/OL］.http://www.globus.org/security/overview.html, 2002-10-17.

[8] THOMPSON M R, OLSON D, COWLES R, et al. CA based trust issues for grid authentication and identity delegation［EB/OL］. http://www.gridforum.org/documents/GFD/GFD2I.17.pdf.2005-10.

[9] FOSTER I, KESSELMAN C, TSUDIK G, et al. A security architecture for computational grids［A］.ACM Conference on Computer and Communications Security Conference［C］. San Francisco,CA,USA:ACM Press,1998.82-89.

[10] CURBERA F,DUFTLER M,KHALAF R, et al. Unraveling the Web services web:an introduction to SOAP, WSDL, and UDDI［J］.IEEE Internet Computing,2002,6(2):86-93.

[11] XU Jiazhen, CHEN Shenmeng. Comparison and analysis of IPSec-based and SSL-based VPN［J］. Computer Engineering and Design, 2004, 25(4): 586-588(in Chinese).［徐家臻，陈莘萌.基于IPSec与基于SSL的VPN的比较与分析［J］.计算机工程与设计，2004，25（4）：586-588.］

[1]	黄爽,黄必清. 云制造平台安全体系架构[J]. 计算机集成制造系统, 2018, 24(第4): 851-861.
[2]	王荣斌，,陈蜀宇,王卫平,喻玲. 网格虚拟组织内访问控制策略的自动组合方法[J]. , 2009, 15(05): 0-0.
[3]	林松,, 李舟军, 张帆. 基于面向服务架构的网上支付安全体系研究与实现[J]. , 2008, 14(12): 0-0.
[4]	吕志. 网格化分布式制造一体化体系结构框架[J]. , 2008, 14(08): 0-0.
[5]	李洪伟，孙世新，杨浩淼. 网格化制造模式中基于身份的认证协议研究[J]. , 2008, 14(01): 0-0.
[6]	唐业，张申生，李磊. 协同商务与设计环境中的安全体系与技术研究[J]. , 2005, 11(02): 0-0.
[7]	卢春霞，张申生，朱祥飞. 基于数字证书的在线声誉评估[J]. , 2003, 9(4): 0-0.