【摘要】 提出了在多级安全数据库管理系统中一种访问控制的新方法。不同于传统的访问控制方法,该方法是基于伪随机函数和同类复杂函数族的。其优点在于高级别的主体可以通过访问密钥来防问低级别的主体的数据,具有很好的安全性。预测伪随机函数的输出和为SIFFs找到冲突解,从计算上是不可能的,这点保证了算法的安全性。更多还原

【Abstract】 This paper presents A new approach to the access control in the multi-level security DBMS.The approach is based on the use of pseudo-random functions and sibling intractable functions(SIFFs ),rather than on the traditional ac-cess control,which depends on the class of each subject or object.The advantage of this approach is that subject with high security level can access lower one’s object,while the lower one can not access the higher one’s.The security of the model depends on the difficulty of predicting the output of pseudo-random functions and on the finding extra sib-ling collision for the SIFFs.更多还原