Apparatus for design of a multilevel secure database management system based on a multilevel logic programming system

• US 5,481,700 A
• Filed: 12/16/1991
• Issued: 01/02/1996
• Est. Priority Date: 09/27/1991
• Status: Expired due to Term

• Current Assignee: Green Wireless LLC (Intellectual Ventures LLC)
• Original Assignee: Mitre Corporation
• Inventors: Thuraisingham, Bhavani M.
• Primary Examiner(s): Black, Thomas G.
• Assistant Examiner(s): AMSBURY, WAYNE P
• Application Number:
  US07/807,940
• Time in Patent Office: 1,478 Days
• Field of Search: 364/513, 380/25, 395/51, 395/61, 395/50, 395/600, 395/10
• US Class Current: 1/1
• CPC Class Codes: G06F 21/55 Detecting local intrusion or implementing counter-measures
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 2221/2113 Multi-level security, e.g. mandatory access control
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

Apparatus for designing a multilevel secure database management system based on a multilevel logic programming system. The apparatus includes a multilevel knowledge base which has a multilevel database in which data are classified at different security levels. The multilevel knowledge base also includes schema, which describe the data in the database, and rules, which are used to deduce new data. Also included are integrity constraints, which are constraints enforced on the data, and security constraints, which are rules that assign security levels to the data. The system further includes users cleared to the different security levels for querying the multilevel database, and a multilevel logic programming system is provided for accessing the multilevel knowledge base for processing queries and for processing the integrity and security constraints. The multilevel database management system makes deductions and gives complete answers to queries and prevents certain unauthorized inferences.

Claims

1. Apparatus for design of a multilevel secure database management system based on a multilevel logic programming system comprising:

a multilevel knowledge base including;

(a) a multilevel database in which data are classified at different security levels;

(b) schema which describe the data in the database;

(c) rules which are used to deduce new data;

(d) integrity constraints which are constraints enforced on the data;

(e) security constraints which are rules that assign security levels to the data;

users cleared to the different security levels for querying the multilevel database; and

a multilevel logic programming system for accessing the multilevel knowledge base for processing queries and for processing the integrity and security constraints,

whereby the multilevel database management system (1) makes deductions and gives complete answers to queries and (2) prevent certain unauthorized inferences.

2. Apparatus of claim 1 wherein the multilevel logic programming system is based on a nonmonotonic typed multilevel logic whose syntax comprises the following entities:

(1) primitive symbols,

(2) terms,

(3) atomic formulas,

(4) well-formed formulas;

each entity having a type and a security level, and

whose semantics comprises assignment of truth values to the entities which vary with different security levels thereby making the logic nonmonotonic.

3. Apparatus of claim 2 wherein the design of the multilevel logic programming system is based upon nonmonotonic typed multilevel logic and comprises a methodology for processing queries of the users at different security levels.

4. The apparatus of claims 1, 2 or 3 wherein the multilevel database, the schema, the integrity constraints and the security constraints are expressed as formulas of a nonmonotonic typed multilevel logic and the multilevel logic programming system processes the formulas to answer queries of users at different security levels.

5. The apparatus of claim 4 wherein only part of the multilevel database, the schema, the integrity constraints and the security constraints are expressed as formulas of a nonmonotonic typed multilevel logic, and the multilevel logic programming system processes the formulas to answer queries at different security levels, the rest being performed by an existing multilevel secure database management system.