基于安全更新视图的XML更新控制方法  

XML update control method based on security update views

作　　者：郭晋凯[1,2] 柏文阳[1,2] 刘铭[1,2] 

机构地区：[1]南京大学软件新技术国家重点实验室,南京210093 [2]南京大学计算机科学与技术系,南京210093

出　　处：《计算机应用》2009年第12期3409-3412,共4页journal of Computer Applications

摘　　要：为了便于用户对XML文档进行更新,同时又保证安全性,提出了一种基于安全更新视图的XML文档的更新控制方法。通过在安全视图的基础上引入Insert、Delete和Replace等更新标记,形成安全更新视图,并提供给用户。对于安全更新视图上用户提交的更新请求Q,给出了授权检查算法和重写为原XML文档上等价更新操作的算法。此方法可以有效地处理XML文档上的更新请求,完成对XML的更新控制;同时由于只向用户提供了对其可见的安全更新视图,从而避免了信息泄漏。In order to facilitate users to update XML documents, while ensuring security, the paper proposed an update control method for XML based on the security update views. To generate a security update view, the annotations of updating constrains were added to Document Type Definition （DTD） elements of a security view, such as Insert, Delete and Replace, to instruct the updating process. In this way, different security update views were provided to different users for their updating operations. For an update query Q on the security update view, this method provided an algorithm to check the authorization of Q and another algorithm to rewrite it to an equivalent operation over the original XML document. The method can deal with updating operations on XML effectively. At the same time, it provides a user with the security update view, which is visible to him only and avoids information leakage.

关 键 词：安全视图 文件类型定义 安全更新视图 XML更新 访问控制 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]