An operational model and language support for securing XML documents

Computers and Security

Volumn 23, Issue 6, 2004, Pages 498-529

  Hwang, Gwan Hwan ^a   Chang, Tao Ku ^a  

^a NATIONAL TAIWAN NORMAL UNIVERSITY   (Taiwan)

Author keywords

Digital signature; DSL; Element wise encryption; Security; XML; XSLT

Indexed keywords

ALGORITHMS; CRYPTOGRAPHY; DATABASE SYSTEMS; ELECTRONIC DOCUMENT IDENTIFICATION SYSTEMS; EMBEDDED SYSTEMS; GRAPHICAL USER INTERFACES; HTML; JAVA PROGRAMMING LANGUAGE; PROFESSIONAL ASPECTS; SECURITY OF DATA;

DOCUMENT SECURITY LANGUAGE (DSL); ELEMENT-WISE ENCRYPTION; SECURITY PATTERNS; WORKFLOW MANAGEMENT SYSTEMS;

XML;

EID: 4544375498     PISSN: 01674048     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.cose.2004.03.003     Document Type: Article

References (48)

1. Arnold, Wollrath, O'Sullivan, Scheifler, Waldo. The Jini specification. June 1999;Addison-Wesley.
2. Bartel Mark, Boyer John, Fox Barb, LaMacchia Brian, Simon Ed. XML-signature syntax and processing. W3C recommendation; 12 February 2002.
3. Bertino Elisa, Castano Silvana, Ferrari Elena. On specifying security policies for web documents with an XML-based language. ACM SACMAT; 2001.
4. Brandt Paul, Bonte Frederik. Towards secure XML. http://lists.w3.org/ Archives/Public/xml-encryption/2000Oct/att-0016/02-Discussion_paper_sXML.doc.
5. Bray T, Maler E, Paoli J, Sperberg-McQueen CM. Extensible markup language (XML) 1.0, W3C recommendation. 2nd ed.; October 2000.
6. Chang Tao-Ku, Hwang Gwan-Hwan. Using the extension function of XSLT and DSL to secure XML documents. International Conference on Advanced Information Networking and Applications (AINA 2004), Fukuoka, Japan; 2004.
7. Clark J. XSLT transforms (XSLT) version 1.0. W3C recommendation. http://www.w3.org/TR/1999/REC-XSLT-19991116.html:November 1999;
8. Clark J., DeRose S. XML path language (XPath) version 1.0. W3C recommendation. http://www.w3.org/TR/1999/REC-xpath-19991116.xml:16 November 1999;
9. Damiani Ernesto, Samarati di Vimercati Pierangela, Paraboschi Stefano. Controlling access to XML documents. IEEE Internet Comput. December:2001.
10. Devanbu P, Gertz M, Kwong A, Martel C, Nuckolls G, Stubblebine SG. Flexible authentication of XML documents. ACM CCS; 2001.
11. Dillaway Blair. Re: attribute encryption (from XML encryption mailing list). http://lists.w3.org/Archives/Public/xml-encryption/2001Jan/0025.html:9 January 2001;
12. Fallside David C. XML schema part 0: primer. W3C recommendation. http://www.w3.org/TR/xmlschema-0/:2 May 2001;
13. Fischer Charles N., LeBlanc Richard J. Jr. Crafting a compiler with C. 1991;The Benjamin/Cummings Publishing Company, Inc.
14. Gettys J., Mogul J., Frystyk H., Masinter L., Leach P., Berners-Lee T. Hypertext transfer protocol - HTTP/1.1. http://www.ietf.org/rfc/rfc2616.txt:June 1999;
15. Goldwasser S., Micali S. Probabilistic encryption. J Comput Syst Sci. 28:(April (2)):1984;270-299.
16. Gosling James, Joy Bill, Steele Guy. The Java language specification. 1st ed. 1986;Addison-Wesley, Reading, Massachusetts, USA.
17. Hada Satoshi, Kudo Michiharu. XML access control language (XACL): provisional authorization for XML documents. Tokyo Research Laboratory, IBM Research http://www.trl.ibm.com/projects/xml/xacl/xacl-spec.html.
18. Hallam-Baker Philip. Re: attribute encryption & Blair's message (from XML encryption mailing list). http://lists.w3.org/Archives/Public/xml- encryption/2001Jan/0043.html:12 January 2001;
19. MIME (multipurpose Internet mail extensions) part one: mechanisms for specifying and describing the format of Internet message bodies. http://www.ietf.org/rfc/rfc1521.txt.
20. Java(TM) remote method invocation (RMI). http://java.sun.com/j2se/1.3/ docs/guide/rmi/.
21. Common object request broker architecture (CORBA/IIOP specification). http://www.omg.org/technology/documents/formal/corba_iiop.htm.
22. XML encryption WG. http://www.w3.org/Encryption/2001/Overview.html.
23. Hwang Gwan-Hwan, Chang Tao-Ku. The document security language (DSL) V2.0. http://www.xml-dsl.com/DSL_Syntax_v2.pdf.
24. Hwang Gwan-Hwan, Chang Tao-Ku. http://www.xml-dsl.com/DSL_editor_detail. htm.
25. Imamura Takeshi. Another proposal of XML encryption. http://lists.w3.org/ Archives/Public/xml-encryption/2000Aug/0005.html:Aug 14 2000;
26. Imamura Takeshi, Maruyama Hiroshi. Specification of element-wise XML encryption. http://lists.w3.org/Archives/Public/xml-encryption/2000Aug/att-0005/ 01-xmlenc-spec.html:2000;
27. Imamura Takeshi, Dillaway Blair, Simon Edi. XML encryption syntax and processing. W3C recommendation. http://www.w3.org/TR/2002/REC-xmlenc-core- 20021210:10 December 2002;
28. (ISO) International Organization for Standardization. ISO 8879:1986(E). Information processing - text and office systems - standard generalized markup language (SGML). 1st ed. - 1986-10-15:1986;International Organization for Standardization, Geneva.
29. Kitsos P, Sklavos N, Koufopavlou O. An efficient implementation of the digital signature algorithm. Proceedings of Ninth IEEE International Conference on Electronics, Circuits and Systems (ICECS'02), Croatia; 2002.
30. Kudo Michiharu, Hada Satoshi. XML document security based on provisional authorization. ACM Conference on Computer and Communication Security (CCS 2000); November 2000.
31. Maruyama Hiroshi, Imamura Takeshi. Element-wise XML encryption. 2000; http://www.alphaworks.ibm.com/tech/xmlsecuritysuite:2000;
32. National Institute of Standards and Technology. Data encryption standard, federal information processing standard, FIPS PUB 46-2; December 1993.
33. Reagle Joseph. XML encryption requirements. W3C working draft. http://www.w3.org/TR/2001/WD-xml-encryption-req-20011018:18 October 2001;
34. Rivest R.L., Shamir A., Adleman L. A method for obtaining digital signatures and public-key cryptosystems. Commun ACM. 21:(February):1978;122-126.
35. Rosario Ricardo. Secure xml: an overview of xml encryption. http://www.cs.rit.edu/~rlr6379/xml_encryption.htm.
36. Schneier Bruce. Applied cryptography: protocols, algorithms, and source code in C. 2nd ed. (October 18, 1995). John Wiley & Sons.
37. Simon Ed. Re: attribute encryption, schema validation, role of XSLT, scope of XML encryption document (from XML encryption mailing list). http://lists.w3.org/Archives/Public/xml-encryption/2001Jan/0033.html:11 January 2001;
38. Simon Ed. XML encryption: issues regarding attribute values and referenced, external data. http://www.w3.org/Encryption/2001/Minutes/0103- Boston/simon-attribute-encryption.html:31 January 2001;
39. Simon E., LaMacchia B. XML encryption strawman proposal. http://lists.w3.org/Archives/Public/xml-encryption/2000Aug/0001.html:09 August 2000;
40. Sun Microsystem. The source for Java(TM) technology. http://java.sun.com: 2002;
41. TAIWAN-CA.COM Inc. http://www.taica.com.tw/.
42. The alphaWorks. XML parser for Java. http://www.alphaworks.ibm.com/tech/ xml4j:25 November 2002;
43. Tidwell Drug. Extending XSLT to encrypt XML on the fly. http://web.oreilly.com/news/XSLT_0801.html.
44. VeriSign Secure Site. http://www.verisign.com/.
45. Vuong Nathan N, Smith Geoffrey S, Deng Yi. Managing security policies in a distributed environment using extensible markup language (XML). ACM SAC; 2001.
46. Wang Yongge. Attribute encryption and low entropy (from XML encryption mailing list). http://lists.w3.org/Archives/Public/xml-encryption/2001Jan/0061. html:18 January 2001;
47. Wiley Steve. Re: attribute encryption (from XML encryption mailing list). http://lists.w3.org/Archives/Public/xml-encryption/2001Jan/0031.html:10 January 2001;
48. Wiley Steve. Re: attribute encryption & Blair's message (from XML encryption mailing list). http://lists.w3.org/Archives/Public/xml-encryption/ 2001Jan/0045.html:13 January 2001;