Access control of XML documents considering update operations

As a large quantity of information is presented in XML format on the Web, there are increasing demands for XML security. Until now, research on XML security has been focused on the security of data communication using digital signatures or encryption technologies. As XML is also used for a data representation of data storage, XML security comes to involve not only communication security but also managerial security. Managerial security is guaranteed through access control, but existing XML access control models consider only read queries. These models may make some problems when unauthorized users try to change XML documents or their structure. Therefore the access control of update queries must be executed correctly and efficiently as well as read queries. In this paper, we discuss an XML access control model and propose a technique that supports not only read operations but also update operations. We define new action types to systematically manage complex information of access righ...

• Type: Conference
• Year: 2003
• Where: XMLSEC
• Authors: Chung-Hwan Lim, Seog Park, Sang Hyuk Son
• Keywords: Access Control, Access Control Models, Security Privacy, XML Security, XMLSEC 2003