Access Control Model Research Based On The Detached Of Distributed Data Sources And Operations

Distributed database system is the combination of database system and computer network system. In a large distributed system, access control authorize has become a very important and complex operation in security management. Domestic and foreign scholars have come up with a variety of database access control methods, but in these methods there are some normal problems such as basically no flexibility in data access or the domain of administration is difficult to divide or have a large-scale of management problem etc. In order to solve the problems in large-scale distributed system's access control problem, this paper proposes detach of the data resources and operators access control model.It is different in data distribution between large-scale distributed systems and centralized systems. This article based on the characteristic of distribution system data and the factual of actual permissions in access control, combined with multi-roots trees gain a new role based access control model and the administrative of the model. In this paper we discuss the permission of the role based access control in a deeper level, and detach the two factors of permission that are data resources and operators, then respectively,regard them as a permit, only gain the combination of these two permit user can make the appropriate access. The combination of data resources and operation is a dynamic form with a session.This article also gives the practical application of this model-flood control and drought of Heilongjiang province, this system has been put into use, in practice, that the detach of data resources and operations access control model is more advantages and more practical in the quantitative data of management and logical.