Access Control in Very Loosely Structured Data Model Using Relational Databases

PAN Ying; TANG Yong; LIU Hai

doi:10.3969/j.issn.0372-2112.2012.03.032

您当前的位置：

首页 >

文章列表页 >

Access Control in Very Loosely Structured Data Model Using Relational Databases

更新时间：2025-07-16

- Access Control in Very Loosely Structured Data Model Using Relational Databases
- Acta Electronica Sinica Vol. 40, Issue 3, Pages: 600-606(2012)
- 作者机构：
  
  1. 中山大学信息科学与技术学院,广东,广州,510006
  2. 广西师范学院计算机与信息工程学院,广西,南宁,530023
  3. 华南师范大学计算机学院,广东,广州,510631
  4. 中山大学信息科学与技术学院广东广州,510006
  5. 广西师范学院计算机与信息工程学院广西南宁,530023
  6. 华南师范大学计算机学院广东广州,510631
- 作者简介：
- 基金信息：
- DOI：10.3969/j.issn.0372-2112.2012.03.032
  CLC： TP309
- Published：2012
- 稿件说明：
移动端阅览
PAN Ying, TANG Yong, LIU Hai. Access Control in Very Loosely Structured Data Model Using Relational Databases[J]. Acta Electronica Sinica, 2012, 40(3): 600-606.
DOI：

PAN Ying, TANG Yong, LIU Hai. Access Control in Very Loosely Structured Data Model Using Relational Databases[J]. Acta Electronica Sinica, 2012, 40(3): 600-606. DOI： 10.3969/j.issn.0372-2112.2012.03.032.

摘要

本文提出一个针对数据空间环境下极松散结构模型的细粒度和动态的访问控制框架:首先定义通用的极松散结构模型GLSDM(General very Loosely-Structured Data Model);给出GLSDM到关系表的映射方法

将GLSDM上细粒度的访问控制转换为关系表的row、cell等安全级别的访问;通过动态查询重写

在用户执行查询时将GLSDM的权限信息添加到SQL语句中

从而实现GLSDM的动态访问控制.理论和实验证明该框架是可行和有效的

本文的映射方法和动态查询重写算法能够保证对GLSDM的访问控制通过等价的关系数据库的访问控制来实现.

Abstract

This paper proposes a framework to efficiently support dynamic

fine-grained access control for the very loosely structured data model

named GLSDM(General very Loosely-Structured Data Model)

which is presented based on the current dataspace data models.In the framework

GLSDM is mapped into and stored in relational databases

and then the fine-grained access control in GLSDM is converted into the corresponding fine-grained security (e.g.

row-level and cell-level security) in relational databases.A query rewriting algorithm is also given to dynamically imbed GLSDM security information into SQL statements the user issues

thus

dynamic access control is realized during the period of query processing.Finally

the validity of the framework is proved by theory and experiment

that is

the GLSDM-to-relational mapping method and query rewriting algorithm in this paper can ensure the access control in GLSDM is equivalent to that in relational databases.

关键词

Keywords

references

Views

下载量

CSCD

Alert me when the article has been cited

提交

Tools

Publicity Resources

Formalization and Verification of Privacy Preserving Protocol Based on User Consent

A CP-ABE Scheme with Cloud Proxy Re-Encryption

Research Progress on Attribute-Based Access Control

Progress of Cryptographic Access Control and Encryption Security Database

Fine-Grained Role Delegation Model Based on Mapping Mechanism

Related Author

MA Li

JIANG Huo-wen

PENG Yun

ZHAO Kai-qiang

KANG Ping

LIU Bin

GUO Zhen

FENG Chao-sheng

Related Institution

School of Digital Industry， Jiangxi Normal University

School of Big Data Science， Jiangxi Science & Technology Normal University

The No.30 institute of China Electronic Technology Corporation

Network and Data Security Key Laboratory of Sichuan Province， University of Electronic Science and Technology of China

Department of Computer Science， Sichuan Normal University

⁰