Methods on XML Authorization and Access Control

Shao-hua TANG

DOI: https://doi.org/10.3969/j.issn.1000-1220.2005.03.025

2005-01-01

Abstract:An authorization and access control model for XML documents is proposed in this paper. The model consists of subject, object, security rules and access control algorithm. The subject is the user or the user group. The object is the protected object. The security rules are used to specify the users privileges to the XML document. The access control algorithm is used to conduct XML document protection according to the security rules. The protection objects of our model can the schema of the XML documents or the instance of the schema. The protection granularity specified by the security rules can be based on document tree structure or based on content. Some concepts, such as authorization conflict, are explained, and the conflict resolution strategy based on the highest priority principle in proposed, which is effective and makes the semantics of authorization rules unique. The access control algorithm is implemented in Java, and SOAP is adopted as communication mechanism, which makes it easier to integrate with other systems. XML is widely used in e-business, so the model in this paper will surely have considerable significant on e-business.