Protection of Relationships in XML Documents with the XML-BB Model

Since XML tends to become the main format to exchange data over the Internet, it is necessary to define a security model to control the access to the content of these documents. Several such models have already been suggested, but we claim that none of them is sufficiently expressive to properly express some basic security requirements, especially those related to entity relationships protection. To cope with these limitations, we suggest to structure the access control policy using the new concept of block. This is used to hide relationships between nodes selected in different blocks. It provides means to specify confidentiality restriction associated with some relationships. An access control model, called XML-BB (XML Block Based Access Control), that includes this concept of block is presented and a formal semantics for this model is defined.

• Type: Conference
• Year: 2005
• Where: ICISS
• Authors: Frédéric Cuppens, Nora Cuppens-Boulahia, Thierry Sans
• Keywords: Access Control, Access Control Policy, Entity Relationships Protection, ICISS 2005