关键词: 访问控制, 活动标记库, 标记树, 标记森林

Abstract: It is the most important that building a consistent mandatory access control mechanism under the network environment with the requirements of information system level protection and network system security. This paper makes a further research on access control mechanism in information systems under network environment, puts forward the concept of the active label library, establishes a kind of access control marking method of supporting active label and proposes a nested index structure named EB+tree supported nodes extension on the basis of B+tree. The EB+tree forms a kind of multiple search tree which can express various label classification and constructs a label tree which is suitable for the application of access control mechanism. Thereby, the research gets a new type of access control mechanism which has validity, consistency and scalability.

Key words: access control, active label library, label tree, label forest