Abstract:As large corporations and organizations increasingly exploit the Internet as a means of improving business-transaction efficiency and productivity, it is increasingly common to find operational data and other business information in XML format. Access control for XML database is non-trivial subjects. A number of recent research efforts have considered access control models for XML data[1−5]. Our first contribution is a novel model for specifying XML security access control. Given an XML document accompanied by a document DTD, we allow a two-stage access control policies to pledge to security access XML document at file-level and element-level respectively. On the element-level access control, our approach for these access control policies is based on the novel notion of hide-node views. While the hide-node view DTD is exposed to authorized users, neither the internal XPath annotations nor the full document DTD is visible. Authorized users can only operate data over the hide-node view, making use of the exposed view DTD to access data. Our hide-node view mechanism guarantees that unauthorized user cannot access sensitive data and protects the schema information from access by unauthorized users. We think that the schema information also is sensitive data and should be protected from gain through the data accessing.

Research on Access Control on XML Documents

Research on access control of XML document

A comparative study on performance of XML parser APIs (DOM and SAX) in parsing efficiency

A Model for Dynamic Access Control of XML Documents Using Semantics

Two-Stage access control model for XML security

XML Keyword Search Based on Secure Access Control

A model of XML access control with dual-level security views

ACCESS CONTROL POLICY AND INDEX OF XML KEYWORD SEARCH

A Fine-Grained Mandatory Access Control Model for XML Documents

Methods on XML Authorization and Access Control

Object Oriented Fine-Granularity Access Control for XML Document

Using Semantics for Dynamic Access Control of XML Documents in Dynamic Coalition Environment.

Enforce mandatory access control policy on XML documents

Using XACML to Define Access Control Policy in Information System

A Implement of Access Control Based Multi-Polices Using XML

Indexing Techniques For Query Of Xml Documents

A Survey on Access Control for Web Services

Access Control Model for Web Services Based on XACML

Research on markup language structure-directed algorithm

An Action-Based Fine-Grained Access Control Mechanism for Structured Documents and Its Application

Querying Techniques for XML Data