利用RBAC实现对XML文档的安全访问控制  

Implementing Access Control on XML with RBAC

作　　者：高扬[1] 张家钰[1] 吴敏[1] 

机构地区：[1]东华大学计算机学院,上海200051

出　　处：《微机发展》2005年第4期98-101,共4页Microcomputer Development

摘　　要：XML日益成为互联网和局域网内数据交换的格式,对XML的访问控制成为越来越受关注的课题。XML表示的信息可能包含不同程度的敏感性数据,不同的用户对这些信息的访问权限是不同的。基于角色的访问控制是一种灵活、高效的访问控制方法,它通过角色把用户和权限相联系,极大降低了授权的复杂性。文中从角色、角色继承、授权等方面分析了如何利用RBAC实现对XML文档的安全访问控制。对XML的授权可以定义在schema,instance甚至元素和属性级别上,从而实现了对XML文档灵活的、多粒度的访问控制。As XML has been increasingly important as a data-exchange format of Internet and Intranet, access control for XML rises as an attractive issue. XML document may include information at different levels of sensitivity, so different users have different permissions on those information. RBAC is a flexible and effective access control model, which connects users and permissions through roles, greatly reducing the complexity of authorizations. This paper analyzes how to realize secure access control for XML documents using RBAC from aspects of role, role hierarchy, authorization, etc. Authorizations on XML can be defined on schema, instance, even element and attribute, accordingly providing a flexible, multi-granularity access control for XML documents.

关 键 词：可扩展标记语言 基于角色的访问控制 文档对象模型 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]