基于时态的多级数据访问控制方法

传统的基于身份认证和存取控制的数据库安全机制存在一定的局限性,如无法防止合法用户权限滥用等非法行为。为对数据库存取控制作进一步的扩展,提出了一个基于时态的访问约束模型,以多级数据关系为基础,对数据的访问操作、查询基数和表关联进行约束。文中给出了模型定义、模拟实现及其编译方法,并显示出该模型具有良好的表达力和灵活性,可有效防止数据库内部权限滥用等非法行为。

Temporal multilevel data access control model

There are some limitations on the traditional user identification and access control of database security mechanism, such as illegal actions of misusing the authorization of legal users. A temporal access constraint model is presented to extend the access control. This model limits the access operations, cardinal number of query and relation associations based on multilevel data relation. The definition, simulation implementation and compilation methods of the model are proposed, and its excellent expression ability and flexibility are demonstrated. The model can prevent internal misuses and other illegal actions in database effectively.