Access control method for spatial database

Abstract

The invention discloses an access control method for a spatial database, which comprises the following steps of: (1) establishing connection and conversation between a user and a spatial database by authentication; (2) inputting access information into the spatial database by the user and analyzing the access information into a query analyzing tree by the spatial database; (3) retrieving an authorization policy according to the query analyzing tree; (4) rewriting the query analyzing tree according to the authorization policy; (5) optimizing the rewritten query analyzing tree; and (6) executing the optimized query analyzing tree and outputting an access result. The method of the invention can provide various authorization policies, support authorizations in different granularity and a positive and negative authorization policy and carry out mandated authorization of data by spreading options. According to the invention, the traditional policy judgment is combined with spatial retrieval into one step, a user query result is confirmed and corresponding information is returned in one-step query, redundancy removal is carried out on spatial predicates by utilizing a combining rule and a cutting rule and the performance of safe access of the spatial database is improved.

Description

technical field [0001] The invention relates to an access control method for a spatial database, which belongs to the technical field of database processing, and in particular to an access control method for vector data and grid data in a spatial database. Background technique [0002] The development of space remote sensing and information technology makes the application of space data more and more extensive, and the access, management and visualization research of space data have entered into daily life. Recently, many companies and organizations have provided spatial data query, access and analysis services for governments and companies in decision-making through geographic information systems. However, the exposure of some sensitive space data (such as military bases) brings national security threats. [0003] The vector data and raster data of the spatial database management system are the main data sources of the spatial data, and the authorization problem is the cor...

AI Technical Summary

Problems solved by technology

There are two main ideas in the existing work: one is to expand the space based on the traditional authorization model. These schemes have defects, such as limited ability to express policies, and the authorization area cannot express the ability of spatial objects such as adjacent to the authorization window. ; It is difficult to implement, and the performance loss caused by the secondary space retrieval is large; it is only suitable for the space application driven by the main body

Another way of thinking is to expand security on the basis of spatial query. The basic idea is to add authorization information to the index of spatial data. However, this method requires a large number of modifications to spatial index information when spatial data and authorization policies change frequently. Brings a serious system burden, currently only applied to some static raster data

Images