The Research And Application Of Access Control Model For Fine-Grained XML Document

Along with the development of computer and internet processing technology, the application of XML technology is more and more extensive. Recently, XML has been one of the key technologies for information exchange and storage. Under this situation, more and more attentions have been paid to the security of XML.. Also, how to access and control the XML document smartly and safely has become a very hot research topic among the academicians in the world. This paper is based on the electronic archives management system. In order to improve the security of system access, this paper mainly explains BLP mandatory access control models and fine-grained access of XML documents and applies the research results to the electronic archives management system. The following are the main achievements of this paper:1) The original BLP model can ensure the information not flowing downward. Usually, in the archives management systems, people can read the high level data by borrowing through the archives and as to the characteristic of documents, data among the same level are not allowed being altered. Therefore, this paper made 3 changes to this model:it can be authorized to read, restrict modifying operation between the same levels and to increase with time character of the BLP model to fit the characteristics and requirement of the archives management system.2) In the archives management system, most of the information is confidential, access control for an entire archive file cannot achieve the safety standards of information protection, which requires the fine-grained access control. Based on these, this paper studies the fine-grained access control of XML documents and proposes a new fine-grained access control policy for XML documents which based on the modified BLP model, therefore to achieve the information security requirements of archives management system.3) Finally, based on the modified BLP model and the fine-grained access control policies of XML documents, this paper implement the electronic archives management system, which include system structure, function structure, rights management, design and coding of users and departments, design of access control list. Moreover, this essay implement three important archives information access control operations, while include archives searches, archives loan and archives browse. At last, by a simple XML document example, the paper gives the method of controlling XML document and element.Overall, after investigating and improving of the BLP model and fine-grained access control policy of XML documents, this paper applies research results to a archives management system. Testing results shows that the improved design of the system has greatly enhanced security and improved document protection of the archives information resources, to further prevent the archives information be malicious tampering, illegal access, and information leakage.