关系数据库中基于安全策略的数据访问控制模型.pdfVIP

刘逸敏①魏明月①周伟平①杨远①高军晖②吴益飞② 摘要 关系数据库中传统的强制访问控制、自主访问控制以及目前常用的基于角色的访问控制机制已难以满足对数据安 全与隐私的管理，常用的解决方法是通过修改应用程序代码将访问控制规则加载到应用中。而这种方法的最大缺陷是用户 用规则表、元数据、查询改写技术来对数据进行访问的数据库访问控制机制；并分析了模型运行的效率。给出模型对不同 粒度数据访问控制的扩展方法。 关键词关系数据库基于策略细粒度访问控制虚拟数据库 Doi：l 673—7571．2009．03．013 0．3969／j．issn．1 A AccessControlModelinRelationalDatabase／LIU SupportingSecurityPolicy-Based Yi—min，WEI aV／China Medicine．一2009to43 Wei-ping，et Digital 4(3)：39 AbstractTraditionalaccesscontrolmechanismsuchaS Contr01．DiscretionalAccessControl Access Mandatory andRole-basedAccessControldon’t theneedsto datafor and oftenusethe satisfy security manage privacy．We methodof codetoenforce to usercanusedatabasetool the inthis modifyingapplication policy，but bypassapplications circumstance．Inthis we a accesscontrolmodelwhichenforcebased paperrepresentsupportingpolicy—based policy rules—table on andmetadataaswellas inrelational themodel querymodifyingtechnology database．Finally，weanalyze underoraclel themodel for AccessContr01． functions efficiencyrunning 09，andexpend Fine—grained Access PrivateDatabase KeywordsControl，Policy-based，Fine—Grained，Virtual Fund fortheNationalScienceand projectMajorProjects 0207) Technology(NO．2008ZXl author Eastern Corresponding HepatobiliarySurger