A system architecture for history-based access control for XML documents

Authors:
Patrick Röder;Omid Tafreschi;Fredrik Mellgren;Claudia Eckert
Affiliations:
Darmstadt University of Technology, Department of Computer Science, Darmstadt, Germany;Darmstadt University of Technology, Department of Computer Science, Darmstadt, Germany;Darmstadt University of Technology, Department of Computer Science, Darmstadt, Germany;Darmstadt University of Technology, Department of Computer Science, Darmstadt, Germany
Venue:
ICICS'07 Proceedings of the 9th international conference on Information and communications security
Year:
2007

Citing 10
Cited 0

RCS—a system for version control

Software—Practice & Experience
Role-Based Access Control Models

Computer
A fine-grained access control system for XML documents

ACM Transactions on Information and System Security (TISSEC)
Secure and selective dissemination of XML documents

ACM Transactions on Information and System Security (TISSEC)
Regulating access to XML documents

Das'01 Proceedings of the fifteenth annual working conference on Database and application security
XML access control using static analysis

Proceedings of the 10th ACM conference on Computer and communications security
Specifying access control policies for XML documents with XPath

Proceedings of the ninth ACM symposium on Access control models and technologies
Relevancy based access control of versioned XML documents

Proceedings of the tenth ACM symposium on Access control models and technologies
History-based access control for XML documents

ASIACCS '07 Proceedings of the 2nd ACM symposium on Information, computer and communications security
Protection: principles and practice

AFIPS '72 (Spring) Proceedings of the May 16-18, 1972, spring joint computer conference

Quantified Score

Hi-index	0.00

Visualization

Abstract

In this paper, we present a history-based model which considers not only the content of an XML document to define access, but also how this content was created. The last aspect is an important factor for access control. Within the proposed model, the creation of documents is stored in histories, which also contain the source and destination of copied document parts. This enables us to define access depending on the origin of document parts. Applying this model in an environment where multiple users can edit documents concurrently is a challenging task, since access decisions depend on other documents, which are possibly edited at the same time. For this purpose, we present a system architecture which supports an efficient workflow and reduces the overhead for determining access rights of documents depending on other documents.