Mandatory access control method and system based on fusion of multiple protection strategies

Abstract

The application discloses a mandatory access control method and system based on fusion of multiple protection strategies. The method comprises the steps of: when receiving an access request which is sent by a subject and aims at an object, extracting security labels embedded in advance on the subject and extracting security labels embedded in advance on the object, wherein both the security labels of the subject and the security labels of the object comprise confidentiality labels and completeness labels; by utilizing the security labels of the subject and the security labels of the object, judging whether the access request meets a preset confidentiality control rule and a preset completeness control rule, if yes, carrying out authorization on the access request, and if no, refusing the access request. According to the application, the confidentiality protection strategy and the completeness protection strategy are fused to carry out access control on the access request, so that data access security can be effectively promoted.

Description

technical field [0001] The invention relates to the technical field of data access, in particular to a mandatory access control method and system based on the fusion of multiple protection policies. Background technique [0002] With the rapid development of computer applications, information security becomes more and more important. Access control is an important way to protect data from being intentionally deleted and destroyed in a computer, and mandatory access control is one of the most important methods. [0003] Mandatory access control is "imposed" on the access subject, that is, the system forces the subject to obey the access control policy. The main feature of mandatory access control is to implement mandatory access control for all subjects and the objects they control (such as processes, files or equipment, etc.). Mandatory access control is generally used in combination with voluntary access control. A subject can only access an object after passing the volun...

AI Technical Summary

Problems solved by technology

However, in the current mandatory access control model, only a single protection strategy is usually used to control access, which limits the further improvement of data access security to a certain extent.

Images