一种改进的多级安全关系数据模型  

An Extended Multilevel Secure Relational Data Model

作　　者：武立福[1] 毛宇光[1] 

机构地区：[1]南京航空航天大学信息科学与技术学院,江苏南京210016

出　　处：《计算机应用》2003年第7期103-105,108,共4页journal of Computer Applications

基　　金：国家 97 3规划项目 (G1 9990 3 2 70 1 )

摘　　要：现有的多级安全系统一般采用BellLaPadula(BLP)模型,但是BLP模型的"向下读,向上写"的访问规则严重影响了系统的可用性、灵活性,破坏了数据完整性。BLP模型也没有对推理进行任何控制。针对上述缺陷,文中采用读写权限分开、多实例、主从结构表和修改读写规则等手段对BLP模型进行改造。改造后的模型不仅增强了系统的机密性而且增强了可用性和数据完整性。Most of current multilevel secure systems adopted Bell LaPadula(BLP) Model. BLP Models access rules of 'No Read Up,No Write Down' seriously constrain the systems availability and data integrity,it doesnt have any mechanism to control inference. To solve these problems,this paper introduced a method to improve BLP Model by using reading and writing clearance separately,polyinstantiation,masterslaver structure tables and modified reading and writing rules. The extended model presented in this paper not only has more systems confidentiality but also has more availability and data integrity.

关 键 词：数据模型 多级安全数据库 数据完整性 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]