Abstract:With the release of the privacy data access guidelines by industries,such as HIPAA and OECD guidelines,the access control of privacy data has recently become a hot research topic in the area of privacy data management.The role-based access control mechanism and view-based access control mechanism in a relational database only support the controls for users'access permissions,but they don't solve the problems of privacyaware access control.The key elements for describing privacy data are the hierarchical structure of data purpose.Several purpose-based access control models presented currently have two shortcomings:The redundancy of privacy policies and the query results not maximized.This paper proposes a novel purpose-based relational database access control model R-PAACEE(privacy-aware access control enforcement engine),which can reduce the redundancy of privacy policies by constructing the concept hierarchy of privacy policies and describing them with ordered tuples.The paper also presents a query-rewritten algorithm for separating the private and non-private attributes,which can maximize the query results.The experimental results show that for a query related to privacy data,a database management system with R-PAACEE can achieve good query performance.

Research and Implementation of Data Permissions Management Based on Attribute Rules

A Task-Role Based Access Control Model with Multi-Constraints

Practical Way to Implement Role-Based Access Control in Security Administration System

Design and Implementation of Context-Aware RBAC Model Based on Reasoning

Implementation of Parameter Model of PRBAC Based on Attribute Rules

The research for spatial role-based access control model

A Semantic and Trust Based Framework for Rbac User-Role Assignment

WARBAC: Improved Administrative Model of Role-Based Access Control

Ontology-Based RBAC specification for interoperation in distributed environment

A MULTI-POLICY SERVICES-ORIENTED ATTRIBUTE-BASED ROLE-BASED ACCESS CONTROL MODEL

Extended Access Control Model Based on RBAC

A Team-role-based Document Access Control Model

Research and implementation of role-based RBAC administration model

A Management-Enhanced Model for RBAC

The Privilege Control of the Users Role Hierarchies Based on RBAC

Access Control Model Based on Attribute and Rule

The Design and Implementation of the Complicated Resource System Based on RBAC Model

Research and Improvement of RB-RBAC

Implementation of Role-Based Access Control Mechanism Based on Enterprise Fundamental Information Platform

Extended RBAC Model and Application

Privacy-Aware Data Purpose Based Access Control for Relational Database