摘要
在数据交换过程中,对XML文档的访问控制管理问题是一个重点和热点问题。目前多数方法是以静态的方式共享加密数据,这类方法无法处理临时的、动态的访问控制规则。该文提出了一种结合静态模型和动态模型的混合模型,利用客户端软硬件设施进行XML文档的动态访问控制管理。通过实例说明和实验比较,证明了该方法的正确性和有效性。
Access control for XML documents is a non-trivial topic, as it can be witnessed from the number of approaches presented in the literature. Several encryption schemes can be used to serve this purpose but all suffer from a static way of sharing data. But there are many situations where access control rules are user specific and dynamic which is difficult to predict. Models compiling access control policies in the data encryption cannot tackle this dynamic. With the emergence of hardware and software security elements on client devices, dynamic client-based access control schemes can be devised. A hybrid client access control model for XML documents is proposed. The validity and feasibility are verified through examples, experiment comparisons.
出处
《计算机工程》
CAS
CSCD
北大核心
2007年第11期144-146,153,共4页
Computer Engineering
