An authorization model for temporal XML documents

ABSTRACT

We here describe an access control model for securing temporal XML document. Our approach is based on a temporal data model allowing to represent both transactional and valid time dimensions of XML documents. The authorization model allows the specification of temporal conditions on the two considered time dimensions and on the validity of the authorizations.

REFERENCES

• 1: Toshiyuki Amagasa , Masatoshi Yoshikawa , Shunsuke Uemura, A Data Model for Temporal XML Documents, Proceedings of the 11th International Conference on Database and Expert Systems Applications, p.334-344, September 04-08, 2000
• 2: P. Bonatti , E. Damiani , S. de Capitani , P. Samarati, A Component-Based Architecture for Secure Data Publication, Proceedings of the 17th Annual Computer Security Applications Conference, p.309, December 10-14, 2001
• 3: T. Bray, J. Paoli, C. Sperberg-McQueen, and E. Maler. Extensible Markup Language (XML) 1.0 (Second Edition). World Wide Web Consortium (W3C), October 2000. http://www.w3.org/TR/REC-xml.
• 4: Stefano Ceri , Sara Comai , Ernesto Damiani , Piero Fraternali , Stefano Paraboschi , Letizia Tanca, XML-GL: a graphical language for querying and restructuring XML documents, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.31 n.11-16, p.1171-1187, May 17, 1999
• 5: Sudarshan S. Chawathe , Serge Abiteboul , Jennifer Widom, Representing and Querying Changes in Semistructured Data, Proceedings of the Fourteenth International Conference on Data Engineering, p.4-13, February 23-27, 1998
• 6: J. Clark and S. DeRose. XML Path Language (XPath) Version 1.O, November 1999. http://www.w3.org/TR/xpath.
• 7: James Clifford , Curtis Dyreson , Tomás Isakowitz , Christian S. Jensen , Richard Thomas Snodgrass, On the semantics of “now” in databases, ACM Transactions on Database Systems (TODS), v.22 n.2, p.171-214, June 1997 [doi>10.1145/249978.249980]
• 8: James Clifford , Abdullah Uz Tansel, On an algebra for historical relational databases: two views, Proceedings of the 1985 ACM SIGMOD international conference on Management of data, p.247-265, May 1985, Austin, Texas, United States
• 9: Ernesto Damiani , Sabrina de Capitani di Vimercati , Stefano Paraboschi , Pierangela Samarati, Design and implementation of an access control processor for XML documents, Computer Networks: The International Journal of Computer and Telecommunications Networking, v.33 n.1-6, p.59-75, June 2000
• 10: Ernesto Damiani , Sabrina De Capitani di Vimercati , Stefano Paraboschi , Pierangela Samarati, Securing XML Documents, Proceedings of the 7th International Conference on Extending Database Technology: Advances in Database Technology, p.121-135, March 27-31, 2000
• 11: Ramez Elmasri , Gene T. J. Wuu , Yeong-Joon Kim, The time index—an access structure for temporal data, Proceedings of the sixteenth international conference on Very large databases, p.1-12, September 1990, Brisbane, Australia
• 12: S. Gadia. The Role of Temporal Elements in Temporal Databases. Data Engineering Bulletin, 11(4): 19-25, December 1988.
• 13: Avigdor Gal , Vijayalakshmi Atluri, An authorization model for temporal data, Proceedings of the 7th ACM conference on Computer and communications security, p.144-153, November 01-04, 2000, Athens, Greece [doi>10.1145/352600.352621]
• 14: Avigdor Gal , Opher Etzion , Arie Segev, Representation of highly-complex knowledge in a database, Journal of Intelligent Information Systems, v.3 n.2, p.185-203, April 1994 [doi>10.1007/BF00962978]
• 15: R. Goldman, J. McMugh, and J. Widom. From Semistructured Data to XML: Migrating the Lore Data Model and the Query Language. In Proc. of the 2nd Int'l Workshop on the Web and Databases, June 1999.
• 16: Fabio Grandi , Federica Mandreoli, The Valid Web: An XML/XSL Infrastructure for Temporal Management of Web Documents, Proceedings of the First International Conference on Advances in Information Systems, p.294-303, October 25-27, 2000
• 17: Michiharu Kudo , Satoshi Hada, XML document security based on provisional authorization, Proceedings of the 7th ACM conference on Computer and communications security, p.87-96, November 01-04, 2000, Athens, Greece [doi>10.1145/352600.352613]
• 18: O. Lassila and R. Swick. Resource Description Framework (RDF) Model and Syntax. World Wide Web Consortium (W3C), February 1999 http://www.w3.org/TR/REC-rdf-syntax.
• 19: Barbara Oliboni , Elisa Quintarelli , Letizia Tanca, Temporal Aspects of Semistructured Data, Proceedings of the Eighth International Symposium on Temporal Representation and Reasoning (TIME'01), p.119, June 14-16, 2001
• 20: Richard Snodgrass , Ilsoo Ahn, Temporal databases, Computer, v.19 n.9, p.35-41, Sept. 1986 [doi>10.1109/MC.1986.1663327]
• 21: Abdullah Uz Tansel , James Clifford , Shashi Gadia , Sushil Jajodia , Arie Segev , Richard Snodgrass, Temporal databases: theory, design, and implementation, Benjamin-Cummings Publishing Co., Inc., Redwood City, CA, 1993
• 22: M. Wolf and C. Wicksteed. Date and Time Formats, September 1997. http://www.w3.org/TR/NOTE-datetime.

INDEX TERMS

Primary Classification:
  H. Information Systems
  H.2 DATABASE MANAGEMENT
      H.2.7 Database Administration
          Subjects: Security, integrity, and protection

Additional Classification:
  K. Computing Milieux
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)

General Terms:
Design, Security

Keywords:
access control, temporal XML documents, transaction time, valid time