关键词: 访问控制, 目的, 上下文, 规则

Abstract: With the rapid development of information technology today, as the most effective storage data tool, the database stores a large number of data related to user??s privacy. But the traditional database access control model cannot guarantee the security of personal privacy data due to the different degrees of protection for the privacy information between different people. This gives birth to the emergence of purpose based access control model. Existing models concentrate on binding the data with intend purpose dynamically, but rarely concern about the distribution between users and access purpose. On the basis of previous studies, this paper proposes a purpose and context based access control model, which uses the rule reasoning mechanism and takes the context information of users as the trigger condition. In this way, the access purpose can be distributes to user dynamically. The experiment shows that, the new model not only makes up the shortcomings of existing models, but also controls the access behavior from user to database efficiently.

Key words: access control, purpose, context, rule