基于RBAC的XML访问控制研究  

Research of XML access control based on RBAC

作　　者：李玉章[1] 罗军[1] 

机构地区：[1]重庆大学计算机学院,重庆400044

出　　处：《计算机工程与设计》2007年第1期53-55,58,共4页Computer Engineering and Design

摘　　要：目前XML技术的应用范围越来越广泛,XML文档中可能包含不同程度的敏感信息,需要受到访问控制策略的保护。基于角色访问控制(role-basedaccesscontrol,RBAC)是一种灵活、高效的访问控制方法。在RBAC96模型的基础上,提出一种扩展权限的角色访问控制模型(extendedpermissionrole-basedaccesscontrol,EPRBAC),并讨论了XML授权机制。XML的授权可以定义在模式、实例甚至元素和属性级别上,从而实现了对XML文档灵活、细粒度的访问控制。At present, XML has received more and more interest. XML documents may include information at different levels of sensitivity. It should be protected by access control policy. RBAC is a flexible and effective access control method. Based on the RBAC96 model, an extended permission role-based access control model called EPRBAC is proposed, and authorization on XML is discussed. Authorization on AML is defined on schema, instance, even element and attribute, accordingly providing a flexible, fine-grained access control for XML documents.

关 键 词：可扩展标记语言 可扩展标记语言模式 基于角色访问控制 扩展权限的角色访问控制模型 XML授权 细粒度 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]