Hierarchical and dynamic security access control for collaborative design in virtual enterprise

This paper proposes a hierarchical and dynamic security access control we call RTBAC (role and task-based access control) model for cooperation in a virtual enterprise. A multi-level privilege model is developed to simplify the process of permission definition and assignment for enriching the expression ability and helping to realize fine-gained access control. Role hierarchy and the task stat migration are brought into RTBAC for dynamic authorization management. Based on the practice, RTBAC model is more efficient to control collaborative operations. It meets the characters of design tasks. Different designers with different roles in different tasks have multi-level privileges to the components; the designers see only the data they are allowed to see, at the level of detail they are permitted to see it, which avoids the shortcoming of "all-or-nothing" permissions.