关键词: 私有目录容器, 令牌, 强制访问控制, 特权

Abstract:

Because of the existence of privilege users such as the administrator, user  data files are difficult to protect. In order to make sure that only the file owner can access these data files, we create a private directory container (PDC), which includes token attributes of user. The PDC access control mechanism can be realized under the OS kernel mandatory access control (MAC) framework, thus protecting user private data files. Only the owner of the PDC can access the files in the PDC, no exception, including administrators. User’s token can only be got by identity authentication, so the owner’s PDC identity cannot be got by others, and private files can be protected effectively.

Key words: private directory container (PDC);token;mandatory access control (MAC);privilege