用户角色的XML动态加密方法研究

Dynamic encryption of XML based on user roles

在阐述了XML加密控制策略的基础上,结合煤矿安全综合监控系统的实际应用需求,针对不同工作人员对不同数据的访问请求,提出了按照用户角色划分,在不重构XML数据文档的基础上,对不同用户请求的XML数据实现动态加密。详细分析了用户请求访问数据的流程结构,加密策略及根据用户角色对XML文档进行动态加密的算法实现。实践表明,以XML文档为数据载体,并用XML格式定义加密策略集,实现对不同角色用户数据的动态加密,方便、灵活、易于扩展,有一定的实际应用价值。

According to the practical application requirements of coal mine safety monitoring system, proposed the idea of without reconstruction of XML documents to achieve its dynamic XML data encryption based on encryption policy. In this dynamic eneryption process, eneryption data is divided by user in accordance with different staff for different data access request. This paper detailed analyzes data flow structure of the user requests, encryption policy, and dynamic encryption algorithm of requested XML documents based on user roles. Practice shows it is convenient, flexible, easy expand, and have some practical value to achieve a dynamic user data eneryption by XML formatted and the encryption policy set.