A Cryptographic Mechanism for Object-Instance-Based Authorization in Object-Oriented Database Systems

In this paper a mechanism for access control at the instance level of a class in object-oriented databases is suggested. The approach is based on the use of pseudo-random functions and sibling intractable functions, rather than on the traditional access control list associated with each object. Each object-instance in the object-oriented model is associated with secure access keys that insure secure access to the object and all related objects. The security of the system depends on the diiculty of predicting the output of pseudo-random functions and on nding extra sibling collision for the sibling intractable function family. The authorization system supports ownership and granting/revoking of access rights.