基于RBAC的XML多粒度访问控制

Multi-Grained XML Access Control for XML Based RBAC

XML文档可能包含了不同程度的敏感信息,为了保证XML文档中的信息不受到非授权的查看和修改,有必要发展一种机制来控制用户对XML文档某个部分的访问权限。在扩展的角色访问控制(Role-Based Access Con-trol,RBAC)模型的基础上,讨论了基于XML模式的多粒度XML文挡授权机制,描述了基于RBAC的XML访问控制体系结构,并提出了一种非递归的XML访问控制算法。

XML document may include information of different sensitivity levels. To prevent XML document from non-authorization querying and modifying, a control mechanism need to be developed to define access to some parts of XML document. Based on RBAC model, multi-grained authorized mechanism for XML document defined by XML schema is discussed, XML access control architecture on RBAC is described, and a non-recursion algorithm of XML access control is presented.