The access control mechanism of a database computer (DBC)

ABSTRACT

The database computer (DBC) is a specialized back-end computer which is capable of managing data 1010 bytes in size and supporting known data models such as relational, network, hierarchical and attribute-based models. It is also perhaps the first database machine to have a built-in security mechanism for access control. At the outset, the security mechanism was made an integral part of the DBC design. This design philosophy not only allowed us to construct a system that has no “backdoors”, but also ensured that all access requests are, in fact, controlled by DBC's security mechanism. The DBC security mechanism is based on the concept of security atoms, aggregates of data units being definable by the user in terms of conjunctions of query predicates. The fundamental gain in utilizing query conjunctions for the purpose of access control is that any data that is accessible or updateable is also protectable. It is believed that the DBC security mechanism is less cumbersome than the view mechanism of some database systems and more efficient than the query modification mechanism used by some other systems. This is demonstrated at three levels of access control, namely the subfile, record and field (attribute) levels.

REFERENCES

• 1: Baum, R. I. and Hsiao, D. K., "Database Computers—A Step Towards Data Utilities," IEEE Transactions on Computers, C25, 12, Dec. 1976. pp. 1254-1259.
• 2: Hsiao, D. K., "Database Computers are Coming! and Database Computers are Coming!," Computer Magazine, March 1979.
• 3: Lowenthal, E. I., "A Survey: The Application of Data Base Management Computers in Distributed Systems," Proceedings of Third International Conference on Very Large Data Bases, ACM, New York, 1977, pp. 85-92.
• 4: Hsiao, D. K., and Madnick, S. E., "Database Machine Architecture in the Context of Information Technology Evolution," Proceedings of the Third International Conference on Very Large Data Bases, ACM, New York, 1977, pp. 63-84.
• 5: Banerjee, J., Hsiao, D. K., and Kannan, K., "DBC—A Database Computer for Very Large Databases," IEEE Transactions on Computers, C-28, 6, June 1979.
• 6: E. A. Ozkarahan , S. A. Schuster , K. C. Sevcik, Performance evaluation of a relational associative processor, ACM Transactions on Database Systems (TODS), v.2 n.2, p.175-195, June 1977 [doi>10.1145/320544.320553]
• 7: Chyuan Shiun Lin , Diane C. P. Smith , John Miles Smith, The design of a rotating associative memory for relational database applications, ACM Transactions on Database Systems (TODS), v.1 n.1, p.53-65, March 1976 [doi>10.1145/320434.320447]
• 8: George P. Copeland, Jr. , G. J. Lipovski , Stanley Y.W. Su, The architecture of CASSM: A cellular system for non-numeric processing, Proceedings of the 1st annual symposium on Computer architecture, p.121-128, December 09-11, 1973
• 9: McCauley, E. J. III, "A Highly Secure Attribute-Based File Organization," Proceedings of the Second USA-Japan Computer Conference, Aug. 1975, pp. 497-501.
• 10: Krishnamurthi Kannan, The design of a mass memory for a database computer, Proceedings of the 5th annual symposium on Computer architecture, p.44-51, April 03-05, 1978 [doi>10.1145/800094.803026]
• 11: Hsiao, D. K. and Menon, M. J., "The Post Processing Functions of a Database Computer," Technical Report OSU-CISRC-TR-79-6, The Ohio State University, Columbus, Ohio, July 1979.
• 12: Krishnamurthi Kannan , David K. Hsiao , Douglas S. Kerr, A microprogrammed keyword transformation unit for a database computer, Proceedings of the 10th annual workshop on Microprogramming, p.71-79, October 05-07, 1977, Niagara Falls, New York, United States
• 13: David K. Hsiao , Krishnamurthi Kannan , Douglas S. Kerr, Structure memory designs for a database computer, Proceedings of the 1977 annual conference, p.343-350, January 1977 [doi>10.1145/800179.810225]
• 14: David K. Hsiao , Stuart E. Madnick , Douglas S. Kerr, Computer Security, Academic Press, Inc., Orlando, FL, 1979

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.6 Database Machines

Additional Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection
          Subjects: Access controls

  H. Information Systems
  H.2 DATABASE MANAGEMENT

General Terms:
Management, Performance, Security