Speaker
Description
In particle accelerator control systems, taking CAFeII and HIAF as examples, the accelerator uses mode management to dynamically rebuild device operation safety boundaries in different operating scenarios. It defines mode objects and configuration information, and IOC access security management is used to enforce access security constraints for mode objects under different modes. IOC access security management can implement permission restrictions from various dimensions, including UAG (User Access Group), HAG (Host Access Group), ASG (Access Security Group), ASL (Access Security Level), and IPAG (IP Access Group), which are implied in CAFeII and HIAF. CAFeII and HIAF use UAG, ASL, ASG, and IPAG. Mode management sets up an operation permission matrix, and IOC permission management uses this to implement a user-role-based control matrix, which specifies different user roles’ read, write, modify, and force-overwrite permissions on specific parameter sets in different operating modes. Different operating modes involve different accelerator systems, and the same system may have different parameter configurations under different modes. Parameter sets are divided by system and correspond to different array PVs. By checking the configuration matrix against the corresponding array index numbers and version numbers, write permissions for consistent configuration parameters are granted. IOC access security management ensures precise control when switching accelerator operation modes, prevents human error, and is the core of accelerator mode management.
