Client-Based Access Control Management for XML documents

Abstract

The erosion of trust put in traditional database servers and in Database Service Providers, the growing interest for different forms of data dissemination and the concern for protecting children from suspicious Internet content are different factors that lead to move the access control from servers to clients. Several encryption schemes can be used to serve this purpose but all suffer from a static way of sharing data. With the emergence of hardware and software security elements on client devices, more dynamic client-based access control schemes can be devised. This paper proposes an efficient client-based evaluator of access control rules for regulating access to XML documents. This evaluator takes benefit from a dedicated index to quickly converge towards the authorized parts of apotentially streaming -document. Additional security mecanisms guarantee that prohibited data can never be disclosed during the processing and that the input document is protected from any form of tampering. Experiments on synthetic and real datasets demonstrate the effectiveness of the approach.

Access Control for Energy-Efficient Query Processing

“…5, our method used memory in processing did not exceed 255kb, but Bouganim [10]'s method used memory in processing was over 380kb. …”

“…The client-based XML document streams access control [10] and decides an access status for currently input data by avoiding the rewriting of queries and performing simultaneous access control rules with query evaluations. It is a technique that obtains a final secure XML document for final user queries by passing the XML document corresponding to user queries to the automata (access rules automata (ARA)), which is unlike Luo [11]'s method that remakes the user queries by creating ARA for access control rules.…”

A general approach to securely querying XML

“…Moreover, our proposal leaves space for further work. Other inspiring approaches [14], [24] enforce client-based access control to XML. Indeed, in [14] and [24], the document is encrypted at the server side and decrypted at the client side.…”

“…Other inspiring approaches [14], [24] enforce client-based access control to XML. Indeed, in [14] and [24], the document is encrypted at the server side and decrypted at the client side. The input of their system is then XML data and the output is also XML data, while in our approach both the input and output is an XML query.…”

Observation-Based Fine Grained Access Control for XML Documents

“…Various proposals in support of fine-grained XML access control have been introduced in the literature. These include View-based [2,8,9], Non-Deterministic Finite Automata (NFA)-based [4,21,22], RDBMS-based [18,19,27] XML Access Control Enforcement Techniques, etc. The idea of view-based access control is to create and maintain separate view for each user based on the authorization rules.…”