Access control models are an important tool developed for securing today’s data systems. Institutions use the access control models specifically to define who their employees are, what they can do, which resources they can reach, and which processes they can perform and use them to manage the whole process. This is a very hard and costly process for institutions with distributed database systems. However, access control models cannot be implemented in a qualified way due to the fact that the conditions for defining users’ demands to reach resources distributed on different servers, one of which is consequentially bound to the other, the verification and authorization of those user demands, and being able to monitor the actions of the users cannot be configured in an efficient way all the time. With our model suggested in this study, the aim is to automatically calculate the permissions and access levels of all users defined in the distributed database systems for the objects, and, in this way, we will reach a more efficient decision as to which objects the users can access while preventing their access to the information they do not need. Our proposed model in this study has been applied to real life data clusters from organizations providing health and education services and a public service. With the proposed model, all models have been run on servers sharing resources in a private network. The performance of the proposed model has been compared to that of traditional access models. It was confirmed that the proposed model presented an access control model providing more accurate access level results as well as being scalable to many distributed database systems.

中文翻译：

---

数据安全中分布式数据库系统的一种新的可扩展和可扩展的访问控制模型

访问控制模型是为保护当今数据系统而开发的重要工具。机构专门使用访问控制模型来定义他们的员工是谁，他们可以做什么，他们可以访问哪些资源，他们可以执行哪些流程并使用它们来管理整个流程。对于拥有分布式数据库系统的机构来说，这是一个非常困难且成本高昂的过程。但是，由于定义用户访问分布在不同服务器上的资源的需求的条件，其中一个必然绑定到另一个，这些用户需求的验证和授权，因此无法以合格的方式实现访问控制模型，并且无法始终以有效的方式配置能够监视用户的操作。根据我们在本研究中建议的模型，目的是自动计算分布式数据库系统中为对象定义的所有用户的权限和访问级别，这样，我们将更有效地决定用户可以访问哪些对象，同时阻止他们访问他们不需要的信息。我们在本研究中提出的模型已应用于来自提供健康和教育服务以及公共服务的组织的现实生活数据集群。使用所提出的模型，所有模型都运行在共享资源的专用网络中的服务器上。已将所提出模型的性能与传统访问模型的性能进行了比较。经证实，所提出的模型提供了一种访问控制模型，可提供更准确的访问级别结果，并且可扩展到许多分布式数据库系统。