Analysis of the Expressive Power of DIFC Model Based on Temporal Logic

Comparing the expressive power of access control models is a fundamental issue in computer security. A better solution to this problem is helpful for understanding the limitations and potential capabilities of models, improving models and selecting appropriate security models for different applications. The existing comparison theories either do not consider the security properties when comparing, or the semantics of the security properties considered are too weak, or the comparison methods are vague and difficult to operate. In this paper, we define a mapping between models whose security properties are preserved based on temporal logic, and propose a more scientific and standard comparison method of expressive power with operability based on the mapping. On this basis, we demonstrate that the DIFC has better expressive power than the BLP model.