摘要
目前XML技术的应用范围越来越广泛,XML文档中可能包含不同程度的敏感信息,需要受到访问控制策略的保护。基于角色访问控制(role-basedaccesscontrol,RBAC)是一种灵活、高效的访问控制方法。在RBAC96模型的基础上,提出一种扩展权限的角色访问控制模型(extendedpermissionrole-basedaccesscontrol,EPRBAC),并讨论了XML授权机制。XML的授权可以定义在模式、实例甚至元素和属性级别上,从而实现了对XML文档灵活、细粒度的访问控制。
At present, XML has received more and more interest. XML documents may include information at different levels of sensitivity. It should be protected by access control policy. RBAC is a flexible and effective access control method. Based on the RBAC96 model, an extended permission role-based access control model called EPRBAC is proposed, and authorization on XML is discussed. Authorization on AML is defined on schema, instance, even element and attribute, accordingly providing a flexible, fine-grained access control for XML documents.
出处
《计算机工程与设计》
CSCD
北大核心
2007年第1期53-55,58,共4页
Computer Engineering and Design
