A Security Access Control Mechanism for a Multi-layer Heterogeneous Storage Structure

Abstract. This paper introduces a general multi-layer storage structure. Object instances from geographic surface objects are transferred and stored into the standard structure. We introduce some new access control rules to modify the BLP model, so that the owner can process unrestrictedly an object that is created by the owner. When a process needs to decide whether to execute an object method, it calculates using the object instance the security level and information flow direction. Key words. Spatial databases, Object-relational data structure, Discretionary Access Control, Mandatory Access Control.