摘要
随着XML应用的飞速增长,XML正逐渐成为Internet上交换半结构化信息的标准。为了实现每个新增加的操作,访问控制技术变得很复杂。本文中提出了一个访问控制模型,该模型利用行为类型来分类处理不同的操作,改进了现有访问控制中新增操作复杂的问题;同时,本文还提出使用树标记算法作为XML文档的转换处理器,因为行为类型的分类,使有的操作减少了不必要的重复检索,所以它比现有的节点过滤访问控制的效率高。
With the rapid increase of XML application, XML is becoming the standard of Semi-structured information exchange on Internet. The existed access control becomes more complicated for each operation as a new operation is added. In this paper, we present an action type of access control model. The model uses the action type to classify different operation, which can improve the problem of add- ing a new operation. At the same time, this paper uses a tree labeling algorithm for transformation processor of XML documents. Some operation can reduce unnecessary retrieval because of the action classification, so it has higher efficiency than that of the existing assess control by filtering nodes.
关键词
XML文档
安全
访问控制
授权策略
XML documents
security
access control
authorization policy