Towards access control for visual Web model management

2004-2005 > Academic research: refereed > Refereed conference paperVersion of RecordPublishe

Supporting XML Security Models Using Relational Databases: A Vision

As the secure distribution and sharing of information over the World Wide Web becomes increasingly important, the needs for flexible and e#cient support of access control systems naturally arise. Since the eXtensible Markup Language (XML) is emerging as the format of the Internet era for storing and exchanging information, there have been, recently, many proposals to extend the XML model to incorporate security aspects. To the lesser or greater extent, however, such proposals neglect the fact that the data for XML documents will most likely reside in relational databases, and consequently do not utilize various security models proposed for and implemented in relational databases

Access Control of XML documents in Relational Database Systems

In this paper, we present the design and implementation of an access control system for XML documents. Our system stores XML documents as relational tables in a relational database management system, and operates in three phases. In phase 1, the authorization rules are preprocessed to determine the information that should be protected. In phase 2, only the necessary information are retrieved from the database, i.e., the protected information are not accessed. Finally, in phase 3, the retrieved data are verified against the (remaining) authorization rules to filter away those that cannot be disclosed