- 期刊
- OpenAccess
A Schema Based Approach to Valid XML Access Control
摘要
As Extensible Markup Language (XML) is becoming a de facto standard for the distribution and sharing of information, the need for an efficient yet secure access of XML data has become very important. An access control environment for XML documents and some techniques to deal with authorization priorities and conflict resolution issues are proposed. Despite this, relatively little work has been done to enforce access controls particularly for XML databases in the case of query access. This work presents an approach to enforce authorizations on XML documents via a filtering system transforming a user query into a rewritten safe query. The basic idea utilized is that a query interaction with only necessary access control rules is modified to an alternative form, which is guaranteed to have no access violations using the metadata of XML schemas and set operations supported by XPath 2.0. This access control mechanism is independent from the underlying XML database engine. Thus, it could be built on top of any XML DBMS, or work as stand-alone services. This work includes other several benefits such as implementation ease, small execution time overhead, and fine-grained controls. The experimental results clearly demonstrate the efficiency of the approach.
延伸閱讀
- 何明營（2005）。The Study of Applying XML Technology to Assist Schema Matching and Transforming in Data Exchange〔碩士論文，中原大學〕。華藝線上圖書館。https://doi.org/10.6840/cycu200500668
- 曾偉誠（2015）。Efficient XML Data Processing based on MapReduce Framework〔碩士論文，國立臺中科技大學〕。華藝線上圖書館。https://doi.org/10.6826/NUTC.2015.00012
- 張迪安（2008）。An Effective XML Document Search Method〔碩士論文，國立中央大學〕。華藝線上圖書館。https://www.airitilibrary.com/Article/Detail?DocID=U0031-0207200917352381
- Basci, D., & Misra, S. (2009). Measuring and Evaluating a Design Complexity Metric for XML Schema Documents. Journal of Information Science and Engineering, 25(5), 1405-1425. https://doi.org/10.6688/JISE.2009.25.5.7
- Byun, C., Yun, I., & Park, S. (2009). A New Optimistic Concurrency Control in Valid XML. Journal of Information Science and Engineering, 25(1), 11-31. https://doi.org/10.6688/JISE.2009.25.1.2