空间数据库管理系统VISTA的角色访问控制设计  

Design of role-based access control in spatial database management system

作　　者：施化吉[1] 李星毅[2] 邵学军[2] 鞠时光[2] 丁秋林[1] 

机构地区：[1]南京航空航天大学计算机应用研究所,江苏南京210016 [2]江苏大学计算机科学与通信工程学院,江苏镇江212013

出　　处：《系统工程与电子技术》2006年第10期1583-1586,共4页Systems Engineering and Electronics

基　　金：国家自然科学基金(60173064);江苏省自然科学基金(BK200204)资助课题

摘　　要：从角色安全定义、角色访问设计角度讨论了空间数据库管理系统VISTA中基于角色的访问控制(role-based access control,RBAC)的设计方案及其实现方法。通过对角色偏序关系和角色管辖域的讨论,说明了该设计方案的可用性和安全性。通过定义虚拟用户的概念,解决了当主体删除时,所属客体的存在性问题,保证了数据的可用性和可继承性。同时给出了该方法的基本算法流程及相应的安全信息数据结构。该方法可以移植到其他相似的ORDBMS中。The role-based access control （RBAC）has been widely used in database system, and its usability and security are key factors in the system design. From the point of view of security definition and design of role access, the design scheme and implementation method of RBAC in spatial database management system VISTA are discussed. Through the discussion of role partial ordered relation and administer field the usability and security of this design scheme are proved. With the definition of virtual user the existence problem of corresponding object is solved,which guarantees the availability and inheritability of the data when the host is deleted. The basic algorithm procedure and data structure of corresponding security information of this method are presented, which can be transplanted to other similar ORDBMS .

关 键 词：数据库管理系统 角色访问控制 角色定义 角色偏序关系 角色管辖域 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]