基于关系数据库的极松散结构数据模型的访问控制研究  

Access Control in Very Loosely Structured Data Model Using Relational Databases

作　　者：潘颖[1,2] 汤庸[3] 刘海[3] 

机构地区：[1]中山大学信息科学与技术学院,广东广州510006 [2]广西师范学院计算机与信息工程学院,广西南宁530023 [3]华南师范大学计算机学院,广东广州510631

出　　处：《电子学报》2012年第3期600-606,共7页Acta Electronica Sinica

基　　金：国家自然科学基金(N.o60970044;No.60673135;No.60736020);广东省自然科学基金(No.7003721);广西教育厅科研项目(No.200807LX429)

摘　　要：本文提出一个针对数据空间环境下极松散结构模型的细粒度和动态的访问控制框架:首先定义通用的极松散结构模型GLSDM(General very Loosely-Structured Data Model);给出GLSDM到关系表的映射方法,将GLSDM上细粒度的访问控制转换为关系表的row、cell等安全级别的访问;通过动态查询重写,在用户执行查询时将GLSDM的权限信息添加到SQL语句中,从而实现GLSDM的动态访问控制.理论和实验证明该框架是可行和有效的,本文的映射方法和动态查询重写算法能够保证对GLSDM的访问控制通过等价的关系数据库的访问控制来实现.This paper proposes a framework to efficiently support dynamic,fine-grained access control for the very loosely structured data model,named GLSDM（General very Loosely-Structured Data Model）,which is presented based on the current dataspace data models.In the framework,GLSDM is mapped into and stored in relational databases,and then the fine-grained access control in GLSDM is converted into the corresponding fine-grained security（e.g.,row-level and cell-level security） in relational databases.A query rewriting algorithm is also given to dynamically imbed GLSDM security information into SQL statements the user issues,thus,dynamic access control is realized during the period of query processing.Finally,the validity of the framework is proved by theory and experiment,that is,the GLSDMto-relational mapping method and query rewriting algorithm in this paper can ensure the access control in GLSDM is equivalent to that in relational databases.

关 键 词：访问控制 数据空间 关系数据库 松散结构 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]