The case for Access Control on XML relationships - Inria - Institut national de recherche en sciences et technologies du numérique Accéder directement au contenu
Rapport (Rapport De Recherche) Année : 2005

The case for Access Control on XML relationships

Résumé

With the emergence of XML as the de facto standard to exchange and disseminate information, the problem of regulating access to XML documents has attracted a considerable attention in recent years. Existing models attach authorizations to nodes of an XML document but disregard relationships between them. However, ancestor and sibling relationships may reveal information as sensitive as the one carried out by the nodes themselves (e.g., classifications, correlations). This paper advocates the integration of relationships as first class citizen in the access control models for XML and makes the following contributions. First, it characterizes three essential classes of relationship authorizations and identifies the mechanisms required to translate them accurately in an authorized view of a source document. Second, it introduces a rule-based formulation for expressing these classes of relationship authorizations and defines an associated conflict resolution strategy. Third, it proposes tractable algorithms to support relationship authorizations. Rather than being yet-another XML access control model, the proposed approach allows a seamless integration of relationship authorizations in existing XML access control model.
Fichier principal
Vignette du fichier
RR-5446.pdf (358.42 Ko) Télécharger le fichier
Loading...

Dates et versions

inria-00070561 , version 1 (19-05-2006)

Identifiants

  • HAL Id : inria-00070561 , version 1

Citer

Béatrice Finance, Saïda Medjdoub, Philippe Pucheral. The case for Access Control on XML relationships. [Research Report] RR-5446, INRIA. 2005, pp.23. ⟨inria-00070561⟩
59 Consultations
151 Téléchargements

Partager

Gmail Facebook X LinkedIn More