为了保护时态隐私数据的隐私性,提出了一种对其安全访问控制方案。根据时态隐私数据的特点,在RBAC96模型的基础上,建立了一种基于角色的时态隐私数据访问控制模型(TPD-RBAC模型)。依据该模型设计相应的隐私策略,然后将其应用于基于XML的时态数据库中,并从文件级别和元素级别对隐私数据的访问进行逐级控制,进一步地满足隐私对象的保护需求。最后以电子病历系统为例讨论了该方案可行性。
To protect of the temporal privacy data's confidentiality, a kind of access control schemas is proposed for its safe access.Based on the characteristics of the temporal privacy data and RBAC96 model, a temporal privacy data role-based control access model(called TPD-RBAC model for short) is established.The corresponding privacy policy is designed in terms of TPD-RBAC model and is applied into temporal database based on XML, and then the privacy data is progressive controlled between file-level and element-level to further satisfy the needs of the privacy objects'protection.Finally, a case of the computer-based patient record system is presented to discuss the feasibility of the schema.