一个基于两级角色的CORBA环境下的多数据库系统授权策略

A Multidatabase System Authorization Strategy Based on Two Type of Roles in A CORBA Environment

在一个多数据库系统中,安全控制是一项必要而又复杂的工作;而一个合适的授权策略则更是重要。文章简要分析多数据库系统中实现安全控制的难点,介绍了两种主要的安全模型(MAC、DAC)及几种典型的授权策略。最后,在已有的授权策略的基础上,提出了一个基于两级角色(全局角色和局部角色)的多数据库系统的授权策略。该策略不需要修改局部数据库自身的安全策略,同时实现也相对简单。最后给出了该策略在CORBA环境下的简单实现。

In a Multidatabase System,security control is a necessary and complex job,while a good authorization strategy is just more important.This paper analyse s the difficulties when implementing the security control in the Multidatabase System and introduces two major security models.It also discusses three typical authorization strategies.And based on these authorization strategies,It presents an authorization strategy using two type of roles(global rule and local rule).It is Relatively easy to implement this authorization strategy and people do not need to change the security strategy of the local database.This paper also presents the implementation of the authorization strategy in a CORBA environment.