Database Access Control and Privacy

数据库访问控制和隐私

• 批准号: 3051-2012
• 负责人: Osborn, Sylvia
• 金额: $ 1.02万
• 依托单位: University of Western Ontario
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2013
• 资助国家: 加拿大
• 起止时间: 2013-01-01 至 2014-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=520538
• 关键词: Database; Access; Control; Privacy

Access control is the ability to say who can do what operations on what data; e.g., the shipper in an on-line book store can read a customer address but not update it. Access control takes over after user authentication, deciding what that user is allowed to access, read, write and update (e.g. the shipper should not be inserting new inventory). Customers may be allowed to say that their address can be used for shipping but not for advertising; this is what is commonly referred to as data privacy. Shipping and advertising are examples of privacy purposes. Data concerning the company's inventory is controlled by access control. Customer data, on the other hand, is also subject to privacy concerns. Implementing these privacy requirements, and the tools to express what should be private, are aspects which concern Computer Scientists.

访问控制是说谁可以对什么数据做什么操作的能力;例如，在线书店中的发货人可以读取客户地址，但不能更新它。访问控制在用户认证后接管，决定允许用户访问、读取、写入和更新什么（例如，发货人不应该插入新的库存）。 客户可以说他们的地址可以用于运输，但不能用于广告;这就是通常所说的数据隐私。 运输和广告是隐私目的的例子。 有关公司库存的数据由访问控制进行控制。 另一方面，客户数据也受到隐私问题的影响。 实现这些隐私要求，以及表达什么应该是私有的工具，是计算机科学家关注的方面。