|
This study aims at formulating secure access control in object- oriented databaseand building a decentralized multiview access control model. In the aspect ofaccess control, we propose a DAC/ MAC access control model which integrates boththe mandatory and discretionary access control together. In the aspect ofconstraints, we propose the BLPB constraints which enhance the Bell-LaPadulamodel by the security and integrity of the multiview model. In the aspect ofof security control, we achieve a decentralized message filtering accesscontrol by filtering the messages passed among objects and combining the BLPBconstrains with the DAC/MAC access control model. In the study, we also solvethe polyinstantiation problem generated from the multiview model and improvethe physical storage structure of object in database based on an optimizationspace utilization and object access time.
|