Trusted DBMS Based Directory Services

Distributed processing is becoming increasingly important. To support multilevel secure distributed processing, multilevel directory services will be requires. X.500 Directory Service will be particularly important as this will be incorporated in significant commercial systems and will be used in the MISSI program. Trusted database management systems (DBMS) have the potential to form the basis for such a directory service. Utilizing the work done to develop trusted DBMS products is important given the effort required to develop trusted components from scratch. This is especially true for C4I systems demanding high-assurance of system trustworthiness. The proposed effort will examine the feasibility of providing trusted multilevel directory services based on an existing high-assurance DBMS, the LOCK DBMS. The proposed approach is to develop an object wrapper on top of the relational LOCK DBMS. This effort will examine the mapping of an object-oriented model to a relational model, including mapping the security constraints required for the object-oriented DBMS to security constraints enforced by the relational DBMS. Based on these results the effort will develop a plan for implementing an X.500 Directory Service on a LOCK DBMS.