An access control model based on matrix domain security label

Abstract

The large complex organization that needs to strictly implement the ‘Need to Know’ secure principle should establish a multi-level security information identification and access control mechanism. In this paper, it proposes that a large-scale complex organization is a matrix structure; hence, a matrix security label that conforms to the characteristics of the matrix domain shall be established. On the basis of RBAC and MLS Model, this paper supplements the definitions of security label and necessary constraints, and thus forms an improved access control model.