| 基于关系数据库的极松散结构数据模型的访问控制研究 |
| |
| 引用本文： | 潘颖,汤庸,刘海.基于关系数据库的极松散结构数据模型的访问控制研究[J].电子学报,2012,40(3):600-606. |
| |
| 作者姓名： | 潘颖 汤庸 刘海 |
| |
| 作者单位： | 1. 中山大学信息科学与技术学院,广东广州510006;广西师范学院计算机与信息工程学院,广西南宁530023
2. 华南师范大学计算机学院,广东广州,510631 |
| |
| 基金项目： | 国家自然科学基金(N.o60970044,No.60673135,No.60736020);广东省自然科学基金(No.7003721);广西教育厅科研项目(No.200807LX429) |
| |
| 摘 要： | 本文提出一个针对数据空间环境下极松散结构模型的细粒度和动态的访问控制框架:首先定义通用的极松散结构模型GLSDM(General very Loosely-Structured Data Model);给出GLSDM到关系表的映射方法,将GLSDM上细粒度的访问控制转换为关系表的row、cell等安全级别的访问;通过动态查询重写,在用户执行查询时将GLSDM的权限信息添加到SQL语句中,从而实现GLSDM的动态访问控制.理论和实验证明该框架是可行和有效的,本文的映射方法和动态查询重写算法能够保证对GLSDM的访问控制通过等价的关系数据库的访问控制来实现.
|
| 关 键 词： | 访问控制 数据空间 关系数据库 松散结构 |
| 收稿时间： | 2010-12-14 |
Access Control in Very Loosely Structured Data Model Using Relational Databases |
| |
| PAN Ying
,
TANG Yong
,
LIU Hai.Access Control in Very Loosely Structured Data Model Using Relational Databases[J].Acta Electronica Sinica,2012,40(3):600-606. |
| |
| Authors: | PAN Ying TANG Yong LIU Hai |
| |
| Affiliation: | 1.Department of Computer Science,Sun Yat-Sen University,Guangzhou,Guangdong 510006,China;2.College of Computer and Information Engineering,Guangxi Teachers Education University,Nanning,Guangxi 530023,China;3.School of Computer Science,South China Normal University,Guangzhou,Guangdong 510631,China) |
| |
| Abstract: | This paper proposes a framework to efficiently support dynamic,fine-grained access control for the very loosely structured data model,named GLSDM(General very Loosely-Structured Data Model),which is presented based on the current dataspace data models.In the framework,GLSDM is mapped into and stored in relational databases,and then the fine-grained access control in GLSDM is converted into the corresponding fine-grained security(e.g.,row-level and cell-level security) in relational databases.A query rewriting algorithm is also given to dynamically imbed GLSDM security information into SQL statements the user issues,thus,dynamic access control is realized during the period of query processing.Finally,the validity of the framework is proved by theory and experiment,that is,the GLSDMto-relational mapping method and query rewriting algorithm in this paper can ensure the access control in GLSDM is equivalent to that in relational databases. |
| |
| Keywords: | access control dataspace relational databases loosely structured |
| 本文献已被 CNKI 万方数据 等数据库收录！ |
| 点击此处可从《电子学报》浏览原始摘要信息 |
|
点击此处可从《电子学报》下载全文 |
|
