关系数据库细粒度访问控制设计与实现  

Design and implementation of fine-grained access control in relational database systems

作　　者：时杰[1] 朱虹[1] 周淳 胡红清[1] 

机构地区：[1]华中科技大学计算机科学与技术学院,湖北武汉430074 [2]达梦数据库有限公司,湖北武汉430074

出　　处：《华中科技大学学报（自然科学版）》2010年第10期35-38,共4页Journal of Huazhong University of Science and Technology(Natural Science Edition)

基　　金：国家高技术研究发展计划资助项目(2006AA01Z430)

摘　　要：通过扩展SQL语句支持关系数据库细粒度访问控制(FGAC)策略的描述,扩展的SQL语句同时支持封闭式细粒度访问控制策略和开放式细粒度访问控制策略的描述,即支持细粒度的否定授权.给出了基于查询改写思想的动态查询改写算法,实现了细粒度访问控制,同时给出了细粒度访问控制实现框架,并在数据库管理系统(DBMS)中实现.实验验证了该实现方法的可行性.The specification of fine-grained access control policy was supported by extending SQL statement in relational database systems. The extending SQL statement supports the specification of close access control policies and open access control policies, namely, negative authorization at fine- grained level was supported. An algorithm based on query modification ideal was presented to enforce fine-grained access control in relational database systems. The framework of fine-grained access control mechanism was also presented. Finally, fine-grained access control was implemented in database management system （DBMS）. It is verified by the experiments that this implementation is feasible.

关 键 词：关系数据库 数据库安全 细粒度访问控制 否定授权 查询改写 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]