Research On Access Control For Vector Map Based On File Filter Driver

Electronic map is a product of the rapid development of computer and network. It ischanging people’s life and travel, making it more convenient. As a kind of electronic maps,the vector map plays an important role in city digital construction, traffic management, searchengine for geographic information as well as military field. Vector map costs to make and iseasy to distribute. Therefore, it will be a huge loss if the important commercial or militaryvector map is stolen or tampered. Although vector map has a high-precision, nondestructivescaling and other excellent characteristics, in some cases, it still can not take the place ofpaper maps such as military strategy maps. Factors of the restrictions on the use of vector mapis not the map itself, but the more stringent requirement for the data security of the map insome specific applications.This paper begins with document security access control,researching the applicability ofthe traditional security access control model as well as its advantages and disadvantages. Asto improve it, the difficulties of role-based access control model in practical applications isanalyzed. A more suitable role-based access control model for vector map security protectionis proposed, making it impossible for unauthorized users to access to the protected filecontents.With the detailed data structure of vector map and a third-party software, the operationmode and process of vector map is analyzed. Access permissions of different access subjectsare determined according to the different degree of map operations in the process of use. Thelevel properties are determined according to the importance degree of vector map, achievingthe combination of document classification and access control.The file filter driver is the basis for achieving this paper. The operation of kernel modefile filter is to intercept file and improve the strength of the access control further. With thecombination of file filter driver and Hook technology, the access granularity can approach to asingle file and the unauthorized operation of authorized user can be avoided as well.