A Fine-Grained Access Control Model with Secure Label on Data Resource

With the demand driven of Web-Based security and the privacy protection for sensitive information, the research on Fine-Grained mandatory access control for data resources in database is getting more attention. A Fine-Grained access control model with security label features (SL-FGAC) is proposed. The data resources are divided by granularity at least on column-level and record-level, where the record-level is discussed in particular. The allocation rules for security labels and constraints on permission and role assignments are argued. Finally the model is applied to an actual access control system, where the processes of classification approval, authorization and access control are discussed in detail, especially adding the limit note expressed as filter conditions for the access control on record-level resources.