文件系统中对象血统的构造方法

The Construct Method of Objects Lineage in File System

传统的安全模型忽略了主体、客体之间可能存在的关联,存在着一些安全漏洞。文章借鉴生物DNA的表达方式,定义了用户DNA、文件DNA的串结构,用DNA编码的简并性来表示主体、客体之间的亲疏关系,通过血统图或血统关系表来表达客体之间的关联关系,通过DNA的匹配表示主体、客体之间的安全关联,从而将抽象的访问控制问题用结构化的算法过程描述出来并加以解决。

The traditional models build up their security policies on the bias of taking a file as an isolated subject and object, and ignore the security relationship between objects. It implies many flaws. This paper set up user＇s DNA and file DNA is coded with biological DNA, the relationships between the users are described with the degeneracy of DNA, and the kin between the files is depicted with the lineage graph or lineage relational table, and the relationship between user and file is explained with the matching of DNA. Thus will describe and solve the abstract question of access control with the structure algorithm process and performs.