Research On Access Control And Trust Negotiation Based On XML

Due to some factors of insecurity existed in nowadays Internet, the issue on access control and trust negotiation is introduced. First, the paper presents the basic knowledge of XML and XML Access Control Language used to access control to XML document. Then, the paper describes several typical Role Based Access Control models, at the same time analyzes and compares them. Next, the paper describes the application framework on WARBAC model and implements strategy of WARBAC. Finally, the paper, besides introducing the basic concepts, analyses Trust_x a comprehensive XML_based solution for trust negotiations, taking into account all aspects related to trust negotiation. To resolve the propagation of recommended trust in trustworthiness valuation models, a definition of trust vector is presented, and based on the definition, a new trustworthiness valuation model is proposed.The main contents are: Several typical Role Based Access Control models, including ARBAC97/ ARBAC02, SARBAC, WARBAC, is described, analyzed and compared,the problem resolving and existing in ARBAC02 and SARBAC is concluded, and how to resolve them in WARBAC is presented thoroughly. The application framework architecture on WARBAC is presented, and implementation of strategy of WARBAC in XML is described. Trust_x is completely discussed, including x_TNL trust negotiation language, Trust_x negotiation process and negotiation of composite resources. Trust vector is defined by introducing trust intensity, and the singleness combination of trustworthiness is developed into the combination of trust vector, effectively avoiding the vicious recommendation in the new trustworthiness valuation model.