Delegatable Access Control for Fine-Grained XML

J. Wu, University of Wollongong
J. Seberry, University of Wollongong
Y. Mu, University of Wollongong
C. Ruan, University of Western Sydney

Article comments

This article was originally published as Wu, J, Seberry, J and Mu, Y, Delegatable Access Control for Fine-Grained XML, Proceedings of the 11th International Conference on Parallel and Distributed Systems Workshops, Fukuoka - Japan, 20-22 July 2005.

Abstract

The access control mechanisms are critical to ensure security in XML (eXtensible Markup Language). Several such mechanisms have been used or proposed; however, the notion of delegation in XML has not been studied in the literature. In this paper we propose an access control model encapsuling delegation authorization rules for XML documents that allow flexible data granularity and limited inference protection. Our access control policy specification is basically DTD-based. It can also be considered to be document-based.