基于双授权链集合的访问控制模型

Double-authorization Chain Sets Based Access Control Model

信息技术的迅速发展使数据库面临的安全问题更加复杂和多样,数据库作为信息系统重要数据的存储和处理核心,往往成为最吸引攻击者的目标。访问控制技术是数据库安全领域的一个重要研究方向,传统的访问控制技术已越来越不能满足现代数据库的安全需求。在传统的自主访问控制机制研究的基础上,提出了一种基于双授权链集合的访问控制模型(DACS)。该模型具有常规授权管理和阻断授权管理功能,支持8种授权和收权操作,同时具备阻断授权机制和独立收权机制。

With the rapid development of information and technology,database faces more serious security situation. As the center of storage and process for the important data,databases often become the targets of attacks. Research of the access control has been an important part in the field of database security, but the traditional access control technologies could not satisfy the requirements of modern database security. On the basis of traditional DAC mechanism research, we proposed a double-authorization chain sets based access control model（DACS）, which supports 8 kinds of authorization management functions including normal authorization and denial authorization, and has denial authorization mechanism and non-cascade revoking mechanism.