n Access Control Model of Web-based Collaborative Design System

ccess control is an important composing part of information security. Aimed at the characteristics of CSCW systems involving a large-scale access control, complicated privilege assignment and management, role-based access control (RBAC) model can overcome the shortage of traditional access control and reduce the complexity of authorization management, it provides an easy realized safe environment for administrators. But in Web-based collaborative assembly design, RBAC model cannot protect the sensitive information effectively; the secrecy and security of RBAC are lack. The mandatory access control (MAC) model emphasizes the secrecy of information and can protect the sensitive information effectively. From the point of view of the sensitive information protection, the role-based collaborative design system access control (RBCDSAC) model is proposed, which integrates RBAC and MAC to construct access control matrix to implement the access control. In Web-based collaborative assembly design, roles and security level are assigned to users. Then the assembly model that user can access is decided by security level of model’s security features and access privileges of roles. In this way, the sensitive information can be protected effectively and the security of the collaborative design is increased.