基于客户端对XML文档的访问控制管理

对XML文档的访问控制管理的研究目前是个热点问题，已有诸多文献提出了许多访问控制模型，它们大多是以静态的方式共享加密数据。然而在某些情况下，会出现临时的、动态的访问控制规则，这样静态模型就不能解决这种情况。随着客户端设备软硬件的发展，出现了基于客户端的动态访问控制方案。本文提出了一个结合静态模型和动态模型的新的混合方案，举例介绍了基于客户端的动态访问控制部分，并与纯动态方案在性能上作了比较。

Client-Based Access Control Management for XML Documents

Access control for XML documents is a non-trivial topic, as can be witnessed from the number of approaches presented in the literature. Several encryption schemes can be used to serve this purpose but all suffer from a static way of sharing data. Unfortunately, there are many situations where access control rules are user specific, dynamic and then difficult to predict. However, models compiling access control policies in the data encryption cannot tackle this dynamicity. With the emergence of hardware and software security elements on client devices, dynamic client-based access control schemes can be devised. This paper proposes a new hybrid solution combining static and dynamic solutions. We compare it with dynamic solution.