BDTema13

6(*85,'$'(16,67(0$6'(%'
+0641&7%%+¦0
‡ 'LIHUHQFLDV6HJXULGDG,QWHJULGDG
± 6HJXULGDG
± 3URWHFFLyQGHGDWRVFRQWUDUHYHODFLyQDOWHUDFLyQRGHVWUXFFLyQQRDXWRUL]DGRV
⇒$VHJXUDUTXHORVXVXDULRVHVWiQ DXWRUL]DGRVSDUDKDFHUORTXHTXLHUHQKDFHU
± ,QWHJULGDG
± ([DFWLWXGRYDOLGH]GHGDWRVGHEHQUHIOHMDUODUHDOLGDG
⇒$VHJXUDUTXHORTXHORVXVXDULRVWUDWDQGHKDFHUHVFRUUHFWR\
(YLWDUODSpUGLGDDFFLGHQWDOGHODFRQVLVWHQFLD
‡ 6LPLOLWXGHV6HJXULGDG,QWHJULGDG
± (OVLVWHPDGHEHFRQRFHUODVUHVWULFFLRQHVTXHORVXVXDULRV QRGHEHQYLRODU
± 5HVWULFFLRQHV HVSHFLILFDGDV>SRUHO '%$SHM@HQXQ OHQJXDMHDSURSLDGR
± /DVUHVWULFFLRQHVGHEHQDOPDFHQDUVH\ PDQWHQHUVHHQHO FDWiORJRGHOVLVWHPD
± (O6*%'GHEH VXSHUYLVDUODLQWHUDFFLyQGHFDGDXVXDULRFRQOD%'SDUD
FRQWURODUHO FXPSOLPLHQWRGHODV UHVWULFFLRQHV
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
6(*85,'$'
#URGEVQUFGNRTQDNGOCFGNC5GIWTKFCF
(Hay que adoptar medidas de seguridad en todos estos niveles)
‡ /HJDOHVVRFLDOHV\pWLFRV¢HOVROLFLWDQWHWLHQHHOGHUHFKROHJDOGHREWHQHUGHWHUPLQDGD
LQIRUPDFLyQVDOGRGHODFXHQWDGHXQFOLHQWH"
‡ 3ROtWLFDLQWHUQDGHODHPSUHVD¢FyPRGHFLGHODHPSUHVDTXLpQSXHGHDFFHGHUDTXp"
¢FyPRDVHJXUDUTXHQRVHUHYHOHQGDWRVFRQILGHQFLDOHVDFDPELRGHVRERUQRV\RWURVIDYRUHV"
‡ &RQWUROHV)tVLFRV¢FyPRSURWHJHUItVLFDPHQWHFRQWUDLQWUXVRVODVVDODVHQGRQGHHVWiQ
ORVVLVWHPDVLQIRUPiWLFRV"
‡ 3UREOHPDVGH2SHUDFLyQVLVHXVDQFRQWUDVHxDV¢FyPRVHPDQWLHQHQHQVHFUHWR"¢FRQ
TXpIUHFXHQFLDVHFDPELDQ"
‡ &RQWUROHVGH(TXLSR¢WLHQHOD&38FDUDFWHUtVWLFDVGHVHJXULGDGFODYHVSDUDSURWHFFLyQ
GHiUHDVGHDOPDFHQDPLHQWRRPRGRGHRSHUDFLyQSULYLOHJLDGR"
‡ 6HJXULGDGGHO62¢ERUUDHO62HOFRQWHQLGRGHiUHDVGHDOPDFHQDPLHQWR\DUFKLYRVGH
GDWRVFXDQGRQRVHQHFHVLWDQ"¢SHUPLWHHO62DFFHVRGLUHFWRDORVILFKHURVGHOD%'"
‡ 6HJXULGDGGHOD5HGODVHJXULGDGHQHOQLYHOGHVRIWZDUHGHUHGHVIXQGDPHQWDOKR\HQ
GtDWDQWRHQ,QWHUQHWFRPRHQODVUHGHVSULYDGDVGHODHPSUHVD
✰$VSHFWRVHVSHFtILFRVGHO6LVWHPDGH%'
¢WLHQHHO6LVWHPDGH%'XQFRQFHSWRGHSURSLHGDGGHGDWRV"
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
6(*85,'$'
‡ /D6HJXULGDGHV FUXFLDOHQ6LVWHPDV0XOWLXVXDULRSXHV
± 'LIHUHQWHVXVXDULRVXVDQXQDPLVPD\JUDQGH%'LQWHJUDGD
± ,QIRUPDFLyQFRQILGHQFLDO VDODULRVVDOGRVGHEHRFXOWDUVHDOD PD\RUtDGHXVXDULRV
ª (O6*%'SURSRUFLRQDWpFQLFDVSDUDTXHJUXSRVGHXVXDULRVDFFHGDQDSDUWHVGHOD
%'VLQWHQHUDFFHVRDOUHVWR
‡ (VLPSRVLEOHOD3URWHFFLyQ7RWDO\$EVROXWDGHOD%'FRQWUDPDOXVRLQWHQFLRQDGR
3HURVHSXHGH(/(9$5(/&267('(/26,17(1726'($&&(6212$8725,=$'2
ORVXILFLHQWHFRPRSDUD',68$',5/26
‡ 0HUHFHODSHQDHO(6)8(5=2SRUFRQVHUYDUODVHJXULGDG\ODLQWHJULGDGGHOD%'
± *UDQGHV%'GHQyPLQDVRGDWRVILQDQFLHURV →DWUDFWLYDVSDUDODGURQHV
± %'GHRSHUDFLRQHVHPSUHVDULDOHV →LQWHUHVDQWHVSDUDFRPSHWLGRUHVVLQHVFU ~SXORV
± /DSpUGLGDGHGDWRVDFFLGHQWHRIUDXGHVXSRQHHOHYDGRVFRVWHV\GLVPLQXFL yQGH
ODFDSDFLGDGGHODHPSUHVDSDUDVHJXLUIXQFLRQDQGR
ª 6XEVLVWHPDGH6HJXULGDG\$XWRUL]DFLyQGHO6*%'
JDUDQWL]DODVHJXULGDGGHSDUWHVGHOD%'FRQWUDDFFHVRVQRDXWRUL]DGRV
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
&21752/'($&&(62
2EMHWRGH'DWRV
98QLGDGGHGDWRVTXHUHTXLHUHSURWHFFLyQLQGLYLGXDO
93XHGHVHUOD%'FRPSOHWDRXQFRQMXQWRGHUHODFLRQHVKDVWDXQDSRVLFLyQ
ILODFROXPQDGHQWURGHFLHUWDUHODFLyQ
%10641.&+5%4'%+10#.0iVIOH[LEOH
‡ 8QXVXDULRWLHQHGLYHUVRVGHUHFKRVGHDFFHVRSULYLOHJLRVVREUHGLVWLQWRVREMHWRV
‡ 3HUPLWHTXHGLIHUHQWHV XVXDULRVWHQJDQSULYLOHJLRVGLVWLQWRVVREUHXQPLVPR
REMHWR
%10641.1$.+)#614+10iVUtJLGR
‡ &DGDREMHWRGHGDWRVHWLTXHWDGRFRQXQ QLYHOGHVHJXULGDG
‡ &DGDXVXDULRVHDVLJQDDXQ QLYHOGHDFUHGLWDFLyQ
‡ &DGDREMHWRGHGDWRVSXHGHVHU DFFHGLGRVyORSRUXVXDULRVFRQDFUHGLWDFLyQ
DSURSLDGD
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
&21752/'($&&(62
‡ 'HFLVLRQHVVREUH VHJXULGDGVRQ SROtWLFDVQRWpFQLFDV IXHUDGHO'%06
‡ 3HUR'%06UHIXHU]DWDOHVGHFLVLRQHVODVLPSRQH2%/,*$DFXPSOLUODV
3DUDHOOR
7DOHVGHFLVLRQHVGHEHQ
D,QGLFDUVHDOVLVWHPDPHGLDQWHVHQWHQFLDVHQ DDLGRANTREVOKE
E6HUUHFRUGDGDVSRUHOVLVWHPD
DOPDFHQDGDVHQHOFDWiORJRHQIRUPDGH
5HJODVR5HVWULFFLRQHVGH6HJXULGDG\$XWRUL]DFLyQ
'HEHH[LVWLUXQDIRUPDGHFRPSUREDUSHWLFLRQHVGHDFFHVR
RSHUDFLyQVROLFLWDGDGDWRVVROLFLWDGRVXVXDULRVROLFLWDQWH
VHJ~QODVUHVWULFFLRQHVUHJODVGHVHJXULGDGDSOLFDEOHV
&KHTXHRUHDOL]DGRSRUHO 6XEVLVWHPDGHO6*%' GH6HJXULGDG\$XWRUL]DFLyQ
6*%'GHEHVHUFDSD]GHUHFRQRFHUHO RULJHQGHXQDSHWLFLyQ XVXDULRVROLFLWDQWH
SDUDGHFLGLU TXpUHJODVGHVHJXULGDG VRQDSOLFDEOHVDFLHUWD VROLFLWXG
⇒LGHQWLILFDGRUGHXVXDULRFRQWUDVHxD
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
&21752/'($&&(62
%10641.&'#%%'51#.5+56'/#).1$#.FG$&
‡ (YLWDUTXHSHUVRQDOQRDXWRUL]DGRDFFHGDDOVLVWHPDGH%'
‡ 3XHVWRHQSUiFWLFDPHGLDQWHFUHDFLyQGH FXHQWDVGHXVXDULRGH%'\FRQWUDVHxDV
‡ '%$
9$XWRULGDGFHQWUDOUHVSRQVDEOHGHOD6HJXULGDG*OREDOGHO6LVWHPDGH%'SXHV
2WRUJD\UHYRFDSULYLOHJLRVDXVXDULRV\
&ODVLILFDGDWRVVHJ~Q QLYHOGHVHJXULGDG\XVXDULRVVHJ~Q QLYHOGHDFUHGLWDFLyQ
97LHQHFXHQWDSULYLOHJLDGDRGHVLVWHPD
FRQFDSDFLGDGHVGH$'0,1,675$'25'(/$%$6('('$726
&UHDFLyQGHFXHQWDV\SDVVZRUGVGHXVXDULRSDUDDFFHGHUDOD%' &21752/*/2%$/
&RQFHVLyQ&DQFHODFLyQGHSULYLOHJLRVDFXHQWDV &21752/',6&5(&,21$/
$VLJQDFLyQGHFXHQWDVGHXVXDULRDQLYHOHVGHVHJXULGDG &21752/2%/,*$725,2
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
&21752/'($&&(62
‡ 6LXQDSHUVRQDQHFHVLWDDFFHGHUD%'GHEHVROLFLWDUXQD FXHQWDGHXVXDULR
‡ &XDQGRHO'%$FUHDXQDFXHQWDOHGDXQ QRPEUH\XQDFRQWUDVHxDSDVVZRUG
1RWD3URJUDPDGHDSOLFDFLyQ 8VXDULRSXHGHH[LJtUVHOHFRQWUDVHxD
%10641.&'757#4+15&'.#$&%7'06#5;%1064#5'¤#5
‡ 7DEODDUFKLYRFLIUDGDFRQGRVDWULEXWRVFDPSRV cuenta, contraseña
‡ $OPDFHQDGDHQHOFDWiORJRGHOVLVWHPD
‡ 3DUDHQWUDUDO6*%'HOXVXDULRLQGLFDDO6*%'VXFXHQWD\VX SDVVZRUG
‡ 6LHO6*%'YDOLGDHVRVGDWRVHOXVXDULRSXHGHXVDUHO6*%'\DFFHGHUDOD%'
‡ 6*%'FRQWURODWRGDRSHUDFLyQGHWRGRXVXDULRHQFDGD VHVLyQGHWUDEDMRHQOD%'
± &XDQGRHOXVXDULRHQWUDHO6*%'DVRFLDVXFXHQWDDOWHUPLQDOGHVGHHOTXHDFFHGH
± 7RGDRSHUDFLyQGHVGHHVHWHUPLQDOVHDWULEX\HDODFXHQWDGHOXVXDULR
ª 6LOD%'VHDOWHUDLQFRUUHFWDPHQWHHO'%$SRGUiVDEHUTXLpQORKL]R ⇒$XGLWRUtD
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
&21752/'($&&(62
U 5')7+/+'061&'#7&+614 #
1HFHVDULRVLORVGDWRVVRQPX\GHOLFDGRVRHOSURFHVDPLHQWRUHDOL]DGRFRQHOORVHV
FUtWLFR
&RQVLVWHHQPDQWHQHUXQDUFKLYRHVSHFLDOGRQGHHOVLVWHPDUHJLVWUDGHIRUPD
DXWRPiWLFDWRGDLQWHUDFFL yQGHORVXVXDULRVFRQOD%'
3HUPLWH
 9HULILFDUTXHWRGRHVWiHQRUGHQ
 6LDOJXLHQKDDFFHGLGRRKDUHDOL]DGRRSHUDFLRQHVVLQDXWRUL]DFL yQGHVFXEULUOR
8QDHQWUDGDHQGLFKRILFKHURSRGU tDFRQWHQHU
Â
Â
Â
Â
Â
Â
Â
RSHUDFLyQSRUHMHPSOR83'$7(
WHUPLQDOGHVGHODTXHVHLQYRF yODRSHUDFLyQ
XVXDULRTXHVROLFLWyODRSHUDFLyQ
IHFKD\KRUDGHODRSHUDFLyQ
EDVHGHGDWRVWDEODVILFKHURVWXSODVUHJLVWUR\DWULEXWRVFDPSRVDIHFWDGRV
YDORUDQWHULRUGHORVGDWRV
QXHYRYDORUGHORVGDWRV
(QPXFKRVFDVRVHOKHFKRGHPDQWHQHUXQVHJXLPLHQWRGHDXGLWRU tDEDVWDSDUD
GHVDQLPDUDSRVLEOHV HVStDV
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
&21752/'($&&(62',6&5(&,21$/
‡ %DVDGRHQ SULYLOHJLRVRDXWRUL]DFLRQHV
‡ 6RSRUWDGRSRUODPD\RU tDGHORV6*%'FRPHUFLDOHV2UDFOH
‡ 3ULYLOHJLRVDQLYHOGH&XHQWD\DQLYHOGH2EMHWR
3ULYLOHJLRVD1LYHOGH&XHQWD
'%$HVSHFLILFDSULYLOHJLRVSDUWLFXODUHVGHFDGDXVXDULRLQGHSHQGLHQWHPHQWHGHODV
UHODFLRQHVHQOD%'
7LSRVGH3ULYLOHJLRV
Â
Â
Â
Â
Â
Â
Â
&5($7(6&+(0$'5236&+(0$
&5($7(7$%/($/7(57$%/('5237$%/(
&5($7(9,(:'5239,(:
&5($7('20$,1$/7(5'20$,1'523'20$,1
&5($7($66(57,21'523$66(57,21
,16(5783'$7('(/(7(WXSODV
6(/(&7
12HVWiQGHILQLGRVHQHOHVW iQGDU64/GHEHGHILQLUORVHOLPSOHPHQWDGRUGHO6*%'
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
&21752/'($&&(62',6&5(&,21$/
3ULYLOHJLRVD1LYHOGH2EMHWR5HODFLyQ'RPLQLR
$SOLFDGRVDREMHWRVLQGLYLGXDOHVUHODFLRQHVEDVHRYLUWXDOHVYLVWDVGRPLQLRV
6tHVWiQGHILQLGRVHQHOHVWiQGDU64/
GRANT <privilegios> ON <objetos> TO <sujetos> [WITH GRANT OPTION]
6HHVSHFLILFDSDUDFDGDXVXDULRDTX pREMHWRVSXHGHDSOLFDUTX pRSHUDFLRQHV
(Q64/H[LVWHQSULYLOHJLRVDQLYHOGH UHODFLyQWDEODRYLVWDDWULEXWR\GRPLQLR
&DGDREMHWRWLHQHXQD FXHQWDSURSLHWDULRHQODTXHIXHFUHDGR
(OSURSLHWDULRGHOREMHWRSRVHH WRGRVORVSULYLOHJLRVVREUHpOLQFOXVRHOGHFRQFHGHU
HVRVGHUHFKRVDRWURVXVXDULRV*5$17237,21
7LSRVGH3ULYLOHJLRV
Â
Â
Â
Â
Â
Â
86$*(XVRGHGRPLQLRV
$//35,9,/(*(6WRGRVORVTXHSRVHHVREUHHOREMHWRDTXHOTXHORVFRQFHGH
6(/(&7WRGRVORVDWULEXWRVGHXQDUHODFL yQLQFOXLGRVORVDxDGLGRVGHVSXpV
83'$7(,16(57DPERVFRQRSFLyQGHVyORFLHUWRVDWULEXWRV
'(/(7(WXSODV
5()(5(1&(6SHUPLWHKDFHUUHIHUHQFLDDFLHUWRVDWULEXWRVGHXQDUHODFL yQPHGLDQWH
5HVWULFFLRQHVGH,QWHJULGDGGHFXDOTXLHUWLSRQRVyOR5,5HIHUHQFLDO
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
&21752/'($&&(62',6&5(&,21$/
0RGHORGHDXWRUL]DFL yQSDUDSULYLOHJLRVGLVFUHFLRQDOHV 0RGHOR0DWUL]GH$FFHVR
Objeto1
Objeto2
Objeto3 ...
User1
User2
NONE
SELECT
SELECT
UPDATE
User3
User4
NONE
ALL
NONE
ALL
ALL
SELECT
DELETE
UPDATE
SELECT
ALL
0XRFRQMXQWRGHDXWRUL]DFLRQHVR
SULYLOHJLRVGHOXVXDULR XVREUHHOREMHWR R
/DILODXHVHOSHUILOGHOXVXDULRX
U %#0%'.#%+¦0UHYRFDFLyQ&'24+8+.')+15SULYLOHJLRVWHPSRUDOHV
REVOKE [GRANT OPTION FOR] <privilegios>
ON <objetos>
FROM <sujetos> { RESTRICT | CASCADE }
REVOKE SELECT ON FOTOGRAFO FROM julia;
REVOKE UPDATE(cuota) ON EDITORIAL FROM ruben;
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
&21752/'($&&(62',6&5(&,21$/
U 751&'8+56#5%1/1/'%#0+5/1&'5')74+&#&&+5%4'%+10#.
6HDHOXVXDULR$SURSLHWDULRGHODUHODFL yQR(a1,a2,a3,a4,a5)
96L$GHVHDTXHRWURXVXDULR%SXHGDOHHU VyORDOJXQRVDWULEXWRVa1,a2,a3GHR
ª $FUHDYLVWDV GHRFRQVyORHVRVDWULEXWRV\GDD%HOSULYLOHJLR SELECTVREUHV
CREATE VIEW V AS SELECT a1, a2, a3 FROM R;
GRANT SELECT ON V TO B;
96L$GHVHDTXH%OHDV yORDOJXQDVWXSODVGH RTXHVDWLVIDFHQFLHUWDFRQGLFL yQQ
ª $FUHDYLVWDWGHRGHILQLGDFRQXQDFRQVXOWDTXHVHOHFFLRQDV yORODVWXSODVGH R
TXHSXHGHYHU%\RWRUJDD%HOSULYLOHJLR SELECTVREUHW
CREATE VIEW W AS SELECT * FROM R WHERE Q;
GRANT SELECT ON W TO B;
➧ 3DUDFUHDUXQDYLVWDODFXHQWDGHEHSRVHHUSULYLOHJLRSELECTVREUHFDGDXQD
GHODVWDEODVEDVHGHODYLVWD
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
&21752/'($&&(62',6&5(&,21$/
2412#)#%+¦0&'24+8+.')+15
&XDQGR$SURSLHWDULRGHXQDUHODFLyQ5FRQFHGHSULYLOHJLRV SELECTSRUHMHPSOR
VREUH5DRWURXVXDULR%WDPEL pQSXHGHGDUOHODRSFLyQGHRWRUJDUGLFKRVSULYLOHJLRV
(FOiXVXOD WITH GRANT OPTION)
GRANT SELECT ON R TO B WITH GRANT OPTION;
'HHVWHPRGR %SRGUiRWRUJDUSULYLOHJLRVVREUH5DRWUDVFXHQWDVGHXVXDULR
3523$*$&,Ï1'(35,9,/(*,26
5HYRFDUODRSFLyQGH GRANTQRFDQFHODQLQJ~QSULYLOHJLRSHURHYLWDVXSURSDJDFL yQ
REVOKE GRANT OPTION FOR SELECT ON R FROM B;
3HURVL$UHYRFDHOSULYLOHJLRGDGRD%¢TXpRFXUUHFRQORVTXH%SURSDJyDSDUWLUGH
pVWH"
⇒3ULYLOHJLRV$EDQGRQDGRVQRYiOLGRV
<VLHOSURSLHWDULRGHXQDYLVWD V SLHUGHHOSULYLOHJLR SELECTVREUHDOJXQDGHODV
WDEODVEDVHGHV
⇒9LVWD$EDQGRQDGDQRYiOLGD
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
&21752/'($&&(62',6&5(&,21$/
‡ &XDQGRXQXVXDULR$UHYRFDSULYLOHJLRVLQGLFDXQDRSFL yQ
· CASCADE
9 HOVLVWHPDUHYRFDU iDXWRPiWLFDPHQWHWRGRVORVSULYLOHJLRVTXHTXHGDU tDQ
DEDQGRQDGRV\
9 HOLPLQDUiODVYLVWDVTXHTXHGDU tDQDEDQGRQDGDV
· RESTRICT
9 HOVLVWHPDQRGHMDU iUHYRFDUXQSULYLOHJLRVLHOORGHMDUDSULYLOHJLRVRYLVWDV
DEDQGRQDGRV
9 6yORORUHYRFDUtDVLQRGHMDUDRWURVSULYLOHJLRVQLYLVWDVDEDQGRQDGRV
‡ 8Q6*%'TXHSHUPLWHSURSDJDFL yQGHEHVHJXLUODSLVWDGHODFRQFHVL yQ\SURSDJDFLyQ
GHSULYLOHJLRVSDUDFRQVHJXLUXQDUHYRFDFL yQFRPSOHWD\FRUUHFWD
‡ 8QXVXDULRSXHGHUHFLELUXQPLVPRSULYLOHJLRGHVGHRP iVXVXDULRV6yORORSHUGHUiVL
ORUHYRFDQWRGRVHOORV
‡ (OLPLQDUXQREMHWRGRPLQLRWDEODEDVHFROXPQDRYLVWDUHYRFDDXWRP iWLFDPHQWH
WRGRSULYLOHJLRHQWRGRVORVXVXDULRVVREUHWDOREMHWRHOLPLQDGR
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
&21752/'($&&(622%/,*$725,2
‡
‡
‡
‡
‡
3DUDHVWDEOHFHUXQD VHJXULGDGPXOWLQLYHO
3ROtWLFDTXHFODVLILFDGDWRV\XVXDULRVHQQLYHOHVFODVHVGHVHJXULGDG
6HFRPELQDFRQHOFRQWUROGHDFFHVRGLVFUHFLRQDO
$XQTXHODPD\RUtDGHORV6*%'VyORRIUHFHQHOFRQWUROGLVFUHFLRQDO
([LVWHODQHFHVLGDGGHHVWDVHJXULGDGPXOWLQLYHOHQDSOLFDFLRQHVJXEHUQDPHQWDOHV
PLOLWDUHVGHHVSLRQDMHGHDOJXQDVLQGXVWULDV
U 0KXGNGUFGUGIWTKFCF
à 76WRSVHFUHW VHFUHWRPi[LPRRDOWRVHFUHWR
VHFUHWR
à 6VHFUHW
à &FRQILGHQWLDO FRQILGHQFLDO
à 8XQFODVVLILHG QRFODVLILFDGR
U /QFGNQFGUGIWTKFCF/WNVKPKXGN
$VLJQDDFDGDVXMHWRXVXDULRFXHQWDRSURJUDPD \DFDGDREMHWRUHODFLyQWXSOD
FROXPQDYLVWD XQQLYHOGHVHJXULGDG766&8
5HJODVUHVWULFFLRQHVGHDFFHVR
1. Un sujeto P puede leer el objeto O si nivel(P) ≥ nivel(O)
2. Un sujeto P puede escribir el objeto O si nivel(P) = nivel(O)
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV
&,)5$'2'(/26'$726
‡ 3DUDSURWHJHUGDWRVFRQILGHQFLDOHV
WUDQVPLWLGRVSRUVDWpOLWHRFXDOTXLHUWLSRGHUHGGHFRPXQLFDFLRQHV
DOPDFHQDGRVHQOD%'ªSURWHFFLyQGHiUHDVGHOD%'
9 Clavede cifradoVHFUHWD
9 Algoritmo de CifradoS~EOLFRRVHFUHWR
9 (VHOWH[WRFLIUDGRHOTXHVHWUDQVPLWHRDOPDFHQD
LQLQWHOLJLEOHSDUDTXLHQQRGLVSRQHGHODFODYH
Texto Original
plaintext
Clave de
Encriptamiento
Algoritmo de
‡ ¢&XiOHVODGLILFXOWDGSDUDXQLQILOWUDGRRLQWUXVRGHHQFRQWUDUCifrado
ODFODYHFRPSDUDQGRSODLQWH[WV\VXVWH[WRVFLIUDGRV"
‡ 3UHFDXFLyQYDULDUODFODYHSHULyGLFDPHQWH
‡ 3XQWRGpELO¢GyQGHDOPDFHQDUODFODYH"
Texto Cifrado
‡ (1&5,37$&,Ï1'(&/$9(3Ò%/,&$
(VTXHPDFRQGRVFODYHVClave de encriptación\Clave de descifrado³GHVHQFULSWDFLyQ´
1LQJXQDSXHGHGHGXFLUVHGHODRWUD
,QFOXVRHOTXHHQFULSWDSXHGHVHULQFDSD]GHUHFXSHUDUHO SODLQWH[WVLGHVFRQRFHODFODYHGH
GHVFLIUDGR
6HJXULGDGHQ6LVWHPDVGH%DVHVGH'DWRV