Languages for Specifying Protection Requirements in Data Base Systems. Part I
H. Rex Hartson, David K. Hsiao · Defense Technical Information Center (DTIC) · 1975
This report develops a macro-oriented model of access control to accommodate constructs of protection languages at many levels of sophistication. The concept of ownership is explicitly represented in the model and is expanded to include subownership and conditional ownership. The basic sets of the set-theoretic model are presented and the set of system states is derived from the set of all values of the resources. Restrictions on resource values define subsets of states, which are described by expressions called conditions. The concept of a five-dimensional security space is used to visualize how authorization specifications and access requests are manipulated by the authorization and enforcement processes. Several examples are presented to illustrate the relationships among the various parts of the security space.