A New XML-based Access Control Scheme For Quickly Querying And Effectively Updating

XML is a new markup language and it has become the main tool of network data storage and exchange for its extendibility, tree data structure, separation of content and structure. With the extensive use of XML documents and the strengthening of the users'security awareness, the security issues of XML data is becoming increasingly important, especially for important and sensitive information in XML databases. Early studies for XML data security focused on XML data encryption and data signing, but they can not satisfy the security requirements to query the XML database. Authorization-based access control allows the users to access their licensed XML document fragments, which can meet the requirments of the access to the different data for different users.The access control can explicitly allows/restricts the access capacity and scope of the objects for users. At present, most of the access control model is using node filtering technique, and the weakness of which is it requires rather time-consuming processe such as parsing, labeling, pruning. And what is worse, when the data is updated, it may lead to the structure change of XML documents.Based on existing access control technology, this paper has proposed an XML access control scheme for quickly querying and effectively updating, which implemented quick querying by combining with indexing/labeling scheme. To achieve effective updating, this paper used NULL objects to delete XML data and memo sub-nodes to insert XML data respectively.