Abstract:As large corporations and organizations increasingly exploit the Internet as a means of improving business-transaction efficiency and productivity, it is increasingly common to find operational data and other business information in XML format. Access control for XML database is non-trivial subjects. A number of recent research efforts have considered access control models for XML data[1−5]. Our first contribution is a novel model for specifying XML security access control. Given an XML document accompanied by a document DTD, we allow a two-stage access control policies to pledge to security access XML document at file-level and element-level respectively. On the element-level access control, our approach for these access control policies is based on the novel notion of hide-node views. While the hide-node view DTD is exposed to authorized users, neither the internal XPath annotations nor the full document DTD is visible. Authorized users can only operate data over the hide-node view, making use of the exposed view DTD to access data. Our hide-node view mechanism guarantees that unauthorized user cannot access sensitive data and protects the schema information from access by unauthorized users. We think that the schema information also is sensitive data and should be protected from gain through the data accessing.

A model of XML access control with dual-level security views

Two-Stage access control model for XML security

The Study of Access Control Model Using XML

Integrity Based Access Control Model for Multilevel XML Document

Improved Fine-grained Mandatory Access Control Model for XML Document

A Mandatory Access Control Model for XML Database

A Model for Dynamic Access Control of XML Documents Using Semantics

The Study of Access Control Model

A View Based Security Framework For Xml

An Extended Mandatory Access Control Model for XML.

A Credential-Based XML Access Control Model

THE RESEARCH ON ACCESS CONTROL POLICY FOR XML DOCUMENTS

Research of data access control based on partial encryption

Methods on XML Authorization and Access Control

A Fine-Grained Mandatory Access Control Model for XML Documents

Data hiding and security for XML database: A TRBAC-based approach

Collaborative Two Level Access Control Mechanism For Shared Xml Warehouse

A XML Oriented Mandatory Access Control Based on Hierarchy Security Labels

A Implement of Access Control Based Multi-Polices Using XML

Data hiding and security for XML database: A TRABAC-based approach

An Extended Role Based Access Contro Method for XML Documents