A new dynamic access control scheme based on subject-object list

摘要

The topic of access control modes is a very important subject in the field of information protection systems. In this paper, we shall propose a new access control mode, the subject-object-list (SO-list), for a system which adds, removes, and updates subjects and objects frequently. The main advantage of the SO-list is that the number of lists remains constant despite the changes in the number of subjects/objects. Furthermore, by applying the key-lock-pair mechanism to the list, we allow a new subject/object to be added to or an existing subject/object to be removed from the system without recomputing a large number of key/lock values. Thus, our method achieves real dynamicism.