XML数据模式下基于purpose的隐私访问控制策略研究与实现  

RESEARCH AND IMPLEMENTATION OF purpose-BASED PRIVACY ACCESS CONTROL POLICY IN XML DATA MODE

作　　者：刘逸敏[1,2] 王智慧[1] 汪卫[1] 

机构地区：[1]复旦大学计算机科学技术学院,上海200433 [2]第二军医大学第三附属医院,上海200438

出　　处：《计算机应用与软件》2013年第2期148-151,共4页Computer Applications and Software

基　　金：高等学校博士学科点专项科研基金资助课题(200802461146)

摘　　要：提出构建基于purpose的对XML数据模式的隐私访问控制策略模型,解决由路径传递引起的查询隐私数据泄漏问题。基于purpose的隐私访问控制策略是一棵最小安全访问树模型。最小安全访问树是一组无冗余路径的以XPath{/,//,[]}片段表示的路径表达式,XPath{/,//,[]}是一组允许访问的隐私结点路径。实验表明最小安全树生成时间取决于隐私结点在一个XML文档中的标注时间和冗余路径的判别时间,而隐私结点的标注时间与隐私数据在XML文档中的分布位置有关。最小安全访问树模型能控制隐私数据的查询泄漏。In this paper,we propose to construct the purpose-based privacy access control policy model for XML data mode,and to solve the problem of query-leakage of privacy data incurred by path transfer.In our approach,the policy is a minimum secure access tree model.And the minimum secure access tree is a group of path expressions expressed by XPath{/,//,} fragments without redundant paths,while the XPath{/,//,} points to a set of privacy nodes path with access permission.Experimental results show that the generation time of minimum secure tree depends on the labelling time of the private nodes in an XML documents and the discriminating time of redundant paths,and the labelling time is pertinent to the position of privacy data distributed in XML documents.The minimum secure access tree model is able to control the query leakage of private data.

关 键 词：隐私保护 访问控制 安全访问树 

分 类 号：TP311.13[自动化与计算机技术—计算机软件与理论]