A function-based access control model for XML databases

XML documents are frequently used in applications such as business transactions and medical records involving sensitive information. Typically, parts of documents should be visible to users depending on their roles. For instance, an insurance agent may see the billing information part of a medical document but not the details of the patient’s medical history. Access control on the basis of data location or value in an XML document is therefore essential. In practice, the number of access control rules is on the order of millions, which is a product of the number of document types (in 1000's) and the number of user roles (in 100's). Therefore, the solution requires high scalability and performance. Current approaches to access control over XML documents have suffered from scalability problems because they tend to work on individual documents. In this paper, we propose a novel approach to XML access control through rule functions that are managed separately from the document...

• Type: Conference
• Year: 2005
• Where: CIKM
• Authors: Naizhen Qi, Michiharu Kudo, Jussi Myllymaki, Hamid Pirahesh
• Keywords: Access Control, CIKM 2005, Document, Rule Functions