Access Control of XML documents in Relational Database Systems

摘要

In this paper, we present the design and implementation of an access control system for XML documents. Our system stores XML documents as relational tables in a relational database management system, and operates in three phases. In phase 1, the authorization rules are pre-processed to determine the information that should be protected. In phase 2, only the necessary information are retrieved from the database, i.e., the protected information are not accessed. Finally, in phase 3, the retrieved data are verified against the (remaining) authorization rules to filter away those that cannot be disclosed.