Researching Of XML Database Access Control Model

With expanding of the XML application,more and more data is managed by adopting XML technology,the security of the database itself is also becoming increasingly important.XML database security is an ongoing research direction.At present,How to put the access control policy oriented XML document into practice is becoming hot spot of studying.Aiming at the characteristic of the XML document and its element,it needs Fine-grained degree access control.Combining the nimble and convenient role assignment in the RBAC model,effectly supporting the characteristic of XML object, owing to XML Schema technology,I design the extending RBAC model oriented XML document on based of RBAC96,to realize the fine-grained degree access control of XML data base.This is the study idea of my task.This article first analysis DAC(discretionary access control),MAC(mandatory access control) and RBAC(role based access control),this three access control models are relatively representative in the development of the access control technology,give the choice of role-based access control(RBAC) model as a starting point for research; Then,XML and its characteristic are introduced and research,enclosing XML database safety,XML access control technologies and XML safety criterion are analysed.XML document access control model is settled on the characteristic of the XML document,including the structure of XML document and the validity of XML, so the access control model must meet the fine-grained degree.On the basis of RBAC96,with Schema-based technology and the fine-grained access control demand for XML documents,and it must support to the specification of XML object is effective integrated,this paper puts forward XML documents Oriented RBAC model and give the formalization definition,named XRBAC.Then,this paper design the frame of XRBAC model using UML static view and function view.Finally,this paper describes the implementation of the XRBAC model about commercial bank access control with XML Schema describing language to finish key technology about XRBAC system. This access control model could meet the demand of a fine-grained access control for XML documents.This model is simple and easy to implement,it has good reference applied value at practical application.