Database access control method on basis of multi-strategy integration

Abstract

The invention provides a database access control method on the basis of multi-strategy integration. The database access control method aims to solve widespread problems in the aspect of security access to databases of comprehensive electronic systems. The database access control method includes enabling an RBAC (role-based access control) module to judge whether roles corresponding to users have access permission corresponding to required-to-be-accessed database tables or not; denying access if the roles do not have the access permission; enabling a BLP (Bell-La Padula) module to judge operation permission of the users for fields in the required-to-be-accessed database tables if the roles have the access permission. The database access control method has the advantages that various security levels of information in databases can be assuredly effectively accessed, the security of the databases can be protected on table levels and even field levels, permission of subjective bodies and objective bodies can be effectively customized according to actual conditions, and corresponding access control strategies can be provided for the subjective bodies of the different roles.

Description

technical field [0001] The invention relates to a database security access control method. Background technique [0002] Informatization will play an increasingly important role in future industry, medical care, and war. Modern integrated electronic systems need to participate in the construction of an integrated information sharing platform for air, space, and ground, which will inevitably lead to the birth of a new generation of integrated electronic systems. The system must provide highly flexible communication capabilities for control data and media data. The improvement of these capabilities and enhancements are based on the sharing of hardware resources by a large number of software. The comprehensive extraction of various information in different representation forms inevitably requires the integration of applications with different security levels into a comprehensive information processing platform. How to implement access control under multiple security levels, yo...

AI Technical Summary

Problems solved by technology

How to implement access control under multiple security levels, you can use BLP mandatory access control, but it lacks flexibility for changing information confidentiality levels, you can also use role-based access control, but this type of autonomous access control is difficult to control the security level globally , how to flexibly and effectively realize the secure access control of multi-security level information has become an important issue of airborne information security

Images