Role locks to prevent illegal information flow among objects
Ryung Chon, Tomoya Enokido, V. Wietrzsk, Makoto Takizawa · 2004
This paper discusses a locking protocol to prevent illegal information flow among objects in a role-based access control model. In this paper, we newly define a conflicting relation "a role R/sub 1/ conflicts with another role R/sub 2/" to show that illegal information flow may occur if a transaction with R/sub 1/ is performed before another transaction with R/sub 2/. Here, we newly introduce a role lock on an object to abort a transaction with R/sub 1/ if another transaction with R/sub 2/ had been already performed on the object. Role locks are not released even if transactions issuing the role locks commit. A role lock on an object can be released if information brought into the object got obsolete. We discuss how to release obsolete role locks.