基于Xpath的XML安全访问控制方法

Method of the Safety Access Controlling XML Based on Xpath

利用Xpath表达式所具有的特点,实现了对XML文档授权与安全访问控制方案。该方案不直接搜索XML文档和DOM树,而是由XML及ACL创建一棵XACT(XML访问控制树)。XACT上每个节点包含了用户的访问控制权限,搜索中使用的路径表达式(XPE)可直接寻找到每一个XACT节点。所以,使访问控制粒度可达到每一个XML语义元素。

Making use of the characteristic of Xpath expression, the document license and the safe accessing controlled scheme of the XML document was put forward. Instead of directly searching XML document and DOM tree, the scheme sets up a XACT which is created through XML and ACL. Each node on the XACT contains the accessing controlling limit of a user. To search the XML path expression （XPE） can find directly each node on the XACT. So, the accessing controlling granularity can reach each XML semantic element.