A write abortion-based protocol in role-based access control systems
A write abortion-based protocol in role-based access control systems
复制标题
基于角色的访问控制系统中基于写入中止的协议
DOI：
10.1504/ijais.2015.072139
复制
发表时间：
2015
期刊：
影响因子：
--
通讯作者：
M. Takizawa
中科院分区：
文献类型：
--
作者：
Shigenari Nakamura;Dilawaer Duolikun;T. Enokido;M. Takizawa
在信息系统中，如果事务操作对象，对象中的数据可能非法流入另一个对象。在我们以前的研究中，基于读流产的基于角色的同步（RA-RBS）和基于对象的同步（RA-OBS）协议，以防止非法信息流在基于角色的访问控制（RBAC）模型进行了讨论。非法读操作意味着可能暗示非法信息流的读操作。在这里，发出非法读操作的事务被中止。在本文中，我们考虑一个唯一的对象，其数据是不允许流到另一个对象。非法写入被定义为事务在阅读唯一对象或非法阅读对象之后发出的写入操作。每个事务都读取对象，但如果事务非法写入对象，则会中止。基于事务发出非法写操作的中止，讨论了两种基于写中止（WA）的同步协议WA-RBS和WA-OBS。在评估中，在WA协议中的事务中止的数量可以比RA协议更多地减少。
In information systems, data in an object may illegally flow into another object if transactions manipulate the objects. In our previous studies, the read-abortion-based role-based synchronisation (RA-RBS) and object-based synchronisation (RA-OBS) protocols are discussed to prevent illegal information flow in the role-based access control (RBAC) model. Illegal read operations mean read operations which might imply illegal information flow. Here, transactions which issue illegal read operations are aborted. In this paper, we consider a unique object whose data is not allowed to flow to another object. An illegal write is defined to be a write operation which a transaction issues after reading a unique object or illegally reading an object. Each transaction reads objects but is aborted if the transaction illegally writes an object. Two types of write-abortion (WA)-based synchronisation protocols WA-RBS and WA-OBS are discussed based on abortions of transactions issuing illegal write operations. In the evaluation, the number of transactions aborted can be more reduced in the WA protocols than the RA protocols.