RDF metadata for XML access control

RDF Metadata for XML Access Control Vaibhav Gowadia [email protected]

Csilla Farkas [email protected]

Information Security Lab Department of Computer Science and Engineering University of South Carolina Columbia, SC 29205

ABSTRACT


 9
    


"     
  "   

   
  
 
 



    
 
 
    

   
 )  &

       

       
      


 
    


 
      
     
       

! 

  
   
    "

! 
    "


   
 
  
   
 %

   
  
      #
 $

        
 
   !

  

    
 
   

   
   
 

  '





(

!  
?      

  6 % &

% 
  &  "

  


    &
    

  &    
   "

 )  
   
  & % 


      &  & 
   % "


  
  
  


   

  #   

     

 
"

  
&  %   

  


 
   

3
7 


 


 
 2
& % 
    

   
%&  
 
  

Categories and Subject Descriptors




 

 -.  %
 " 
"  & 
  
  
/ 01 , 
   -. 2  
 3 
" % 
 


  & %  
     
 


Keywords

# 
  
  
 "  

% 
 &  
 &      
"

  

    & %    
 ]>

* patient

ssn name phone birthdate race

* diagnosis date physician comment prescription

* * allergies

*




allergen



    
  
 
     
      
  
     

 



   &

   

       
" 1. Query


 
 $
 
  
   
  

 
  

  
 
 
  ! 
B
     



          

Security Violated

2
C

9 Return answer



  #
      %

4,7

Update History


2
0      "

7Security not violated

      
   

'   " 
(


2
=           

Check security Violations

6. return

8



History File

5

2 Answer

4. Security not

trees




 

1  
  
     

2.

XML

3.

Store

4
 
'%4( ! 
  #
   
   

Security Policy (RXACL)

Reject Query


2
*

violated

Tree Extention

    
!" !    !  
!! ! 

RDF-BASED XML ACCESS CONTROL ARCHITECTURE   *    %4     
 
 "

 
    
 !  

   "   

  C !    

   
 

.

6

D  

& *

% 4
 &

3. DEFINITIONS


 C A   !