Relevancy-based access control and its evaluation on versioned XML documents

  • Authors:

  • Mizuho Iwaihara;Ryotaro Hayashi;Somchai Chatvichienchai;Chutiporn Anutariya;Vilas Wuwongse

  • Affiliations:

  • Kyoto University, Kyoto, Japan;Kyoto University, Kyoto, Japan;Siebold University of Nagasaki, Nagasaki, Japan;Shinawatra University, Thailand;Asian Institute of Technology, Thailand

  • Venue:
  • ACM Transactions on Information and System Security (TISSEC)
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

Integration of version and access control of XML documents has the benefit of regulating access to rapidly growing archives of XML documents. Versioned XML documents provide us with valuable information on dependencies between document nodes, but, at the same time, presenting the risk of undesirable data disclosure. In this article, we introduce the notion of relevancy-based access control, which realizes protection of versioned XML documents by various types of relevancy, such as version dependencies, schema similarities, and temporal proximity. We define a new path query language XVerPath over XML document versions, which can be utilized for specifying relevancy-based access-control policies. We also introduce the notion of relevancy class, for collectively and compactly specifying relevancy-based policies. Regarding efficient processing of access requests, we propose the packed version model, which realizes space-efficient difference-based archives of versioned XML documents and, at the same time, providing efficient evaluation of XVerPath queries. Experimental results show reasonable performance superiority over conventional methods, which do not utilize version differences.