基于高可信体系安全锁协议算法研究

介绍了一个应用于多级数据库的安全两阶段锁协议算法。该算法通过将锁表分为多个密级，当锁冲突时高密级事务部分回滚的方式来避免在多级安全数据库中实施两阶段锁协议时的隐通道问题，同时为了应用于高可信体系，算法通过将事务管理器从可信模块中分离出来的方法来实现高可信体系中可信模块最小化的要求。本文给出了该协议的具体算法和实现结构，最后对协议的安全性和可串性作了分析。

Algorithm for Secure Locking Protocol Based on High Assurance Architecture

An algorithm for secure two-phase locking protocol used in multi-level database is presented. By dividing locking table into different levels and roll backing the high level transaction partly when there is contention, the algorithm avoids the covert channel problem happened in implementing two-phase locking protocol in multi-level secure database. The algorithm achieves the requirement of trust modular minimum in high assurance architecture by dividing the transaction manager form the trust modular. Finally the concrete algorithm and design structure of the protocol are discussed and the security and the serializablility of the protocol are analyzed.