A Conflict Detection Mechanism for Authorization Using Intention Types in Object-Oriented Database Systems

Tae-Jong SON; Kyu-Young WHANG; Won-Young KIM; Il-Yeol SONG

A Conflict Detection Mechanism for Authorization Using Intention Types in Object-Oriented Database Systems

Tae-Jong SON, Kyu-Young WHANG, Won-Young KIM, Il-Yeol SONG

Full Text Views

0

Cite this

Summary :

Many object-oriented database systems have used the notion of implicit authorization to avoid the overhead caused by explicitly storing all authorizations for each object. In implicit authorization, it is very important to detect efficiently conflicts between existing authorizations and new authorizations to be added. In this article we propose a conflict detection mechanism in the OODBMSs using implicit authorization with the notion of intention type authorization. When we grant an authorization on a node n in the database granularity hierarchy, the existing method is inefficient in determining the conflicts since it needs to examine all authorizations on the descendants of the node n. In contrast, our mechanism has the advantage of detecting the conflicts at the node n where an explicit authorization is to be granted without examining any authorizations below the node n. Thus, the proposed mechanism can detect a conflict with the average time complexity of O(d), which is smaller than O(m^d) of existing methods, where m is the number of children nodes at an arbitrary level and d is the difference of levels between the node with an existing explicit authorization and the higher node where an explicit authorization is to be granted. We also show that the additional storage overhead of storing all authorizations is negligible when compared with the total number of all explicit authorizations.

Publication: IEICE TRANSACTIONS on Information Vol.E81-D No.10 pp.1053-1063

Publication Date: 1998/10/25

Publicized

Online ISSN

DOI

Type of Manuscript

Category: Databases

Cite this

Copy

Tae-Jong SON, Kyu-Young WHANG, Won-Young KIM, Il-Yeol SONG, "A Conflict Detection Mechanism for Authorization Using Intention Types in Object-Oriented Database Systems" in IEICE TRANSACTIONS on Information, vol. E81-D, no. 10, pp. 1053-1063, October 1998, doi: .
Abstract: Many object-oriented database systems have used the notion of implicit authorization to avoid the overhead caused by explicitly storing all authorizations for each object. In implicit authorization, it is very important to detect efficiently conflicts between existing authorizations and new authorizations to be added. In this article we propose a conflict detection mechanism in the OODBMSs using implicit authorization with the notion of intention type authorization. When we grant an authorization on a node n in the database granularity hierarchy, the existing method is inefficient in determining the conflicts since it needs to examine all authorizations on the descendants of the node n. In contrast, our mechanism has the advantage of detecting the conflicts at the node n where an explicit authorization is to be granted without examining any authorizations below the node n. Thus, the proposed mechanism can detect a conflict with the average time complexity of O(d), which is smaller than O(m^d) of existing methods, where m is the number of children nodes at an arbitrary level and d is the difference of levels between the node with an existing explicit authorization and the higher node where an explicit authorization is to be granted. We also show that the additional storage overhead of storing all authorizations is negligible when compared with the total number of all explicit authorizations.
URL: https://global.ieice.org/en_transactions/information/10.1587/e81-d_10_1053/_p

Copy

@ARTICLE{e81-d_10_1053,
author={Tae-Jong SON, Kyu-Young WHANG, Won-Young KIM, Il-Yeol SONG, },
journal={IEICE TRANSACTIONS on Information},
title={A Conflict Detection Mechanism for Authorization Using Intention Types in Object-Oriented Database Systems},
year={1998},
volume={E81-D},
number={10},
pages={1053-1063},
abstract={Many object-oriented database systems have used the notion of implicit authorization to avoid the overhead caused by explicitly storing all authorizations for each object. In implicit authorization, it is very important to detect efficiently conflicts between existing authorizations and new authorizations to be added. In this article we propose a conflict detection mechanism in the OODBMSs using implicit authorization with the notion of intention type authorization. When we grant an authorization on a node n in the database granularity hierarchy, the existing method is inefficient in determining the conflicts since it needs to examine all authorizations on the descendants of the node n. In contrast, our mechanism has the advantage of detecting the conflicts at the node n where an explicit authorization is to be granted without examining any authorizations below the node n. Thus, the proposed mechanism can detect a conflict with the average time complexity of O(d), which is smaller than O(m^d) of existing methods, where m is the number of children nodes at an arbitrary level and d is the difference of levels between the node with an existing explicit authorization and the higher node where an explicit authorization is to be granted. We also show that the additional storage overhead of storing all authorizations is negligible when compared with the total number of all explicit authorizations.},
keywords={},
doi={},
ISSN={},
month={October},}

Copy

TY - JOUR
TI - A Conflict Detection Mechanism for Authorization Using Intention Types in Object-Oriented Database Systems
T2 - IEICE TRANSACTIONS on Information
SP - 1053
EP - 1063
AU - Tae-Jong SON
AU - Kyu-Young WHANG
AU - Won-Young KIM
AU - Il-Yeol SONG
PY - 1998
DO -
JO - IEICE TRANSACTIONS on Information
SN -
VL - E81-D
IS - 10
JA - IEICE TRANSACTIONS on Information
Y1 - October 1998
AB - Many object-oriented database systems have used the notion of implicit authorization to avoid the overhead caused by explicitly storing all authorizations for each object. In implicit authorization, it is very important to detect efficiently conflicts between existing authorizations and new authorizations to be added. In this article we propose a conflict detection mechanism in the OODBMSs using implicit authorization with the notion of intention type authorization. When we grant an authorization on a node n in the database granularity hierarchy, the existing method is inefficient in determining the conflicts since it needs to examine all authorizations on the descendants of the node n. In contrast, our mechanism has the advantage of detecting the conflicts at the node n where an explicit authorization is to be granted without examining any authorizations below the node n. Thus, the proposed mechanism can detect a conflict with the average time complexity of O(d), which is smaller than O(m^d) of existing methods, where m is the number of children nodes at an arbitrary level and d is the difference of levels between the node with an existing explicit authorization and the higher node where an explicit authorization is to be granted. We also show that the additional storage overhead of storing all authorizations is negligible when compared with the total number of all explicit authorizations.
ER -