Researches on Integrating Database Access Control and Privacy Protection

The development of modern information technology and digitalization of our daily lives brings security database new challenges. It is necessary for a security database to provide access control and privacy protection mechanism to ensure the legal use of data and to prevent privacy breach. This paper introduces an integrated security model which can provide the functions of privacy protection and access control simultaneously by building the connection between the validity of query in parameterized authorization view model and the suspiciousness of a conjunctive select-project-join query in online query audit model, it also designs a polynomial time detecting algorithm and two incorporating frameworks for the integrated model. The integrated security model can provide higher performance and fine-grained access control in modern database systems.