應用於存取控制之單鍵雙鎖法

Abstract

存取控制為電腦安全與資訊私密性之一重要環節，其目的在於依安全需求 保護電腦資源，其運作方式為對存取者所提出之存取請求進行合法性驗証 。1984 年 Wu 與 Hwang 提出一鍵鎖系統 (Key-Lock-Pair System)，以 實施存取控制機能。在其架構下，繼有多篇文獻提出單鍵鎖法 (Single- Key-Lock Methods)。然而從實用觀點看來，目前已發表之單鍵鎖法在效 率上仍無法取代一般所使用之串列儲存方式。本篇論文旨在提出一單鍵雙 鎖法 (Single-Key-Double-Lock Methods)，期能保存鍵鎖系統在計算上 之優點，進而降低鍵鎖所需之儲存空間。再者，本法對存取請求所使用之 兩段驗証 (Two-Phase Checking)，亦為此後鍵鎖法之設計，提供另一思 考途徑。 The access control, an important component of computer security and information privacy, supervises that accesses required by accessors to computer resources are authorized. In 1984, Wu and Hwang proposed a Key-Lock-Pair (KLP) access control mechanism [6 ]. Since then, several Single-Key-Lock (SKL) methods [1-7] have been proposed for implementing the KLP. However, none of them is efficient enough to replace the linked lists in practical applications. This thesis proposes a Single-Key-Double-Lock (SKDL) method that utilizes the concept of two-phase checking, reduces storage requirement without compromising computational efficiency, and could provide a new implementation method for the access control in secure systems.