## 3 Methodology
### Trusted Framework System  
It is crucial to develop new methods for controlling the framework system during the setup of new online or cloud systems. Although many existing systems provide some degree of protection, they all possess inherent weaknesses. It is essential to develop a stronger method that ensures multilevel security to protect data and resources. This is commonly used in the military, where information is categorized as unclassified (U), confidential (C), secret (S), top secret (TS), or higher. This concept can be applied across various domains, where information is systematically categorized, and users are granted access to specific types of data. Multilevel security refers to the need to define multiple categories or levels of data. In addition, the allowed data flows in an MLS system illustrate all acceptable interactions between a subject operating at the \"Secret\" level and various objects with different security levels, as clearly depicted in Figure 1 with assistance from [35]. Furthermore, according to the Bell-LaPadula model [36], which underpins the generation of the MLS/DBMS model, two key properties are enforced. These strategies are discussed in detail below:  
* **No read-up**: A fundamental principle in information security, known as the simple security property, states that a subject is only allowed to access or read an object with an equivalent or lower security level.  
\begin{table}
\begin{tabular}{c c c c} \hline \hline
**Years** & **Ref.** & **Purpose** & **Drawbacks** & **Description** \\ \hline
2014 & [20] & Prevent data leaks, especially caused by mis operation and malicious inside users & The BLP-based model may not be fully representative of real-world usage, where more complex attack vectors could exist. & Access to data is managed by the security levels of subjects and objects; the present security levels of subjects may be altered by the study of sensitive data. \\ \hline
2012 & [21] & Combination of the Multilevel Relational (MLR) model and an encryption system & Suffers from performance issues during data updates due to the need for encryption and decryption operations. & The encryption algorithm encrypts each data component in the tuple with a unique field-key based on its security classification, and decrypts each field-key separately. \\ \hline
2003 & [14] & Belief-Consistent Multilevel Secure (BCMLS) as a basis for prototype & Complex and requires substantial effort on both the server and client sides. & The prototype, developed on the software database server via a PHP web client, facilitates the input, deletion, and updating of multilevel data. \\ \hline \hline \end{tabular}
\end{table}
Table 1: _Cont._* **No write-down**: A subject with a specific security level can write to an object with a security level that is equal to or higher than its own. This principle is commonly referred to as the
* property, pronounced as the \"star property\".  
We focused on these two strategies as novel guidelines for determining authentication classifications. When applied precisely and strictly, they provide multiple levels of security. The strategies implemented, extensively researched and developed, are based on the reference monitor concept as described in [37]. This approach was chosen for its well-established foundation in research and development. It serves as a critical component of operating systems and computer hardware, overseeing and managing access authorizations between subjects and objects. Consequently, the reference monitor in MLS/DBMS enables access to a designated file, known as the operating system security database, which records each subject's security clearances and each object's classification levels, as shown in Figure 2. As a result, our model employs this regulation, which is based on the security parameters of both the subject and the object involved.