Firstly , in this paper , we review the histories of xml and xml database , and all kinds of data models used widely now . then we review traditional access control policies and policies specially used on xml , and present a new expression method of access set on xml based on child tree of w3c data model . and we bring rbac model into xml database and present a new xml access model x - rbac . because the usage of data in databases has high frequency , we present an ids model based on access set density to logging the potential security threats . and then we introduce the design and implementation of a prototype of our native xml database nhx and its access control system . finally , we draw a conclusion for this paper and the future work 本文首先回顾了xml及xml数据库的历史,并总结了目前广泛使用的xml数据模型,在分析了各种传统数据库访问控制策略,以及xml的专有访问控制策略的优缺点后,基于w3c的xml数据模型,提出了一种基于子树的具有高弹性的便于实现的的访问区域表示法,并将rbac模型引入进来,提出了一种适用于xml数据库的访问控制模型x - rbac ,同时为了区分xml数据库访问中的合法访问和合理访问,我们根据数据库访问具有频繁性这一特征,提出了一种基于区域访问密度的入侵检测模型( ids ) ,以对隐藏在正常访问中的潜在安全威胁进行报警和日志。
We characterized the security issues in asp - based networked manufacturing system , especially the issue of the user access control . then the typical methods of access control were introduced , which include discretionary access control ( dac ) , mandatory access control ( mac ) , role - based access control ( rbac ) , task - based access control ( tbac ) , coalition - based access control ( cbac ) and relationship - driven access control ( rdac ) and so on . based on that , we provided an integrated user access control model , which was composed of rbac , tbac , rdac and cbac 本章描述了asp和网络化制造系统的安全性问题，尤其是用户访问控制的问题；接着介绍了几种浙江大学博士学位论文典型的访问控制方法，包括强制访问控制、任意访问控制、基于角色的访问控制、基于任务的访问控制，以及基于公司关系的访问控制、基于企业联盟的访问控制等;在前面描述的典型访问控制模型基础上，给出了一个网络化制造系统的综合访问控制模型，包括网络化制造系统的用户和资源层次关系图、访问控制参考模型和访问控制过程模型，并定义了各个模型中的相关元素和关系，给出了各级约束验证和授权的表达;最后我们给出了以xacml为基础的网络化制造系统的访问控制描述语言。
The greatest innovation of the system is firstly adopting windows 2000 advanced server which can use the clustering of server as the web server and the sql server 2000 as the database server which is a commercially used database server and many people can visit the same web site in the same time . moreover the page is convenient to updating , administration and maintenance because the content of the dynamic page using the methods of accessing the database ado of asp come from the database 系统中的一个最大的特点就是首次使用了windows2000高级服务器作为web服务器，用sqlserver2000作数据库服务器，其中windows2000高级服务器支持集群技术，而数据库服务器是一种商用的数据库服务器，它可以同时支持成千上万的用户同时访问web站点，而同时用asp技术对数据库进行访问，产生的是一种动态网页，其网页中的内容基本是数据库中而来，所以页面的更新非常容易，网页易于管理和维护。
With the rapid development of network and database technology , there is great need for different enterprises to share their information , thus the construction of the shared platform of heterogeneous databases was put forward , which mainly makes full use of the existing data resources in every database and offers the method of accessing and cooperating the heterogeneous data 随着网络技术和数据库技术的快速发展，各部门、各行业的信息迫切需要共享和互操作，异构信息共享交换平台在这样的应用背景下孕育而生，旨在充分利用各信息系统已有的数据资源，实现不同信息系统数据的互访。
With the rapid development of new technology , the network and system constructed then will lag behind time . so at the last part of this thesis , the extension and improvement of the system are presented , the method of access to other networks and the construction of intranet are discussed . the model of the regional health management information system is explored and some schemes of implement are also submitted 由于新技术的迅猛发展，在当时的背景及条件下建立的网络及系统将逐渐落后于时代，在本论文的最后部分提出了对于该系统的功能扩展和改进，探讨了该网络与其他网络的互联，利用本系统及internet构筑企业内部网nranct ，以及社区医疗信息系统的模型等，探讨了新技术的应用，提出了一些实现方案，为今后系统的改进提供了一些参考。
Analyze the systematic structure of the product data management system and study the object representation of the product data integration model , the product data attribute and operation , the product information modeling and the theory and method of access control modeling in order to set up the object model of the product data access control and describe the data base conversion of the object model and executive method 分析产品数据管理系统的体系结构，研究产品数据的集成模型的对象表示，产品数据属性和操作，产品信息建模和访问控制建模的理论和方法；建立产品数据访问控制的对象模型，并说明对象模型的数据库转换和实现方法。
Fellow practitioners wanting to learn this cyber method of accessing master s teachings may be interested in obtaining the cd - " how to surf the internet how to get online , " a special news group production that guides you through the basic techniques of linking and surfing the net , enjoying audio and video programs , and downloading the news magazine 为了帮助同修跟上e时代的弘法脚步，新闻组特别制作上网教学cd片，教导同修如何连线上网观赏影音，以及下载新闻杂志等多项技术。
