| 摘要: |
| 针对敏感空间地理矢量数据形状不规则、跨多级敏感区域分布的特点,对传统的强制访问控制模型进行空间扩展,提出了一种细粒度的空间矢量数据强制查询访问控制模型SV_MAC(spatial vector data mandatory access control model).并进一步将空间数据查询与安全策略检索相结合,提出了一种AR+树(access R+树)索引结构,以在空间矢量数据查询过程中高效地实现SV_MAC授权判定.实验结果表明,AR+树在为空间矢量数据的检索提供不可绕过的细粒度安全防护的同时,保障了前台响应速率和用户体验. |
| 关键词: 空间矢量数据安全 访问控制模型 强制访问控制 R+树索引 授权模型实现 |
| DOI：10.3724/SP.J.1001.2011.03868 |
| 分类号: |
| 基金项目:国家自然科学基金(61003228); 中国科学院知识创新工程领域前沿项目(ISCAS 2009-DR13) |
|
| Fine-Grained Mandatory Query Access Control Model and Its Efficient Realization for Spatial Vector Data |
|
ZHANG Yan1,2, CHEN Chi1,2, FENG Deng-Guo1,2
|
|
1.State Key Laboratory of Information Security, Institute of Software, The Chinese Academy of Sciences, Beijing 100190, China;2.National Engineering Research Center of Information Security, Beijing 100190, China
|
| Abstract: |
| To protect the spatial vector data, which is often in an irregular shape and distributed throughout multiple sensitive areas, the traditional mandatory access control model is extended and explained in this paper. This paper also proposes a fine-grained spatial mandatory query access control model?SV_MAC (spatial vector data mandatory access control model). Also, an AR+ spatial index tree technique is advanced, which combines the search of both spatial data and access control policies together to efficiently enforce the SV_MAC model in the course of spatial vector data searching. Experiment results shows that AR+ tree can not only provide fine-grained security protection for sensitive spatial vector data, but can also guarantee good user experience for GIS (geography information system) applications. |
| Key words: spatial vector data security access control model mandatory access control R+ tree index authorization model realization |
