Applying hierarchical and role based access control to XML documents

Proceedings of the 2004 Workshop on Secure Web Service, SWS 2004

Volumn , Issue , 2015, Pages 37-46

  Crampton, Jason ^a  

^a UNIVERSITY OF LONDON   (United Kingdom)

Author keywords

Encryption; Hierarchical access control; Role based access control; XML

Indexed keywords

CRYPTOGRAPHY; WEB SERVICES; WEBSITES; XML;

ACCESS CONTROL POLICIES; CONTROL ACCESS; CONTROL FRAMEWORK; HIERARCHICAL ACCESS CONTROL; HIERARCHICAL STRUCTURES; ROLE-BASED ACCESS CONTROL; XML DIGITAL SIGNATURES; XML ENCRYPTION;

ACCESS CONTROL;

EID: 84954147732     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1111348.1111353     Document Type: Conference Paper

References (25)

1. Akl, S., and Taylor, P. Cryptographic solution to a problem of access control in a hierarchy. ACM Transactions on Computer Systems 1, 3 (1983), 239-248.
2. Bertino, E., Carminati, B., and Ferrari, E. A temporal key management scheme for secure broadcasting of XML documents. In Proceedings of the 8th ACM Conference on Computer and Communications Security (2002), pp. 31-40.
3. Bertino, E., Castano, S., and Ferrari, E. Author-X: A comprehensive system for securing XML documents. IEEE Internet Computing 5, 3 (2001), 21-31.
4. Damiani, E., De Capitani di Vimercati, S., Paraboschi, S., and Samarati, P. A fine-grained access control system for XML documents. ACM Transactions on Information and System Security 5, 2 (2002), 169-202.
5. Ferraiolo, D., Kuhn, D., and Chandramouli, S. Role-Based Access Control. Artech House, Boston, Massachussetts, 2003.
6. Harn, L., and Lin, H. A cryptographic key generation scheme for multilevel data security. Computers and Security 9, 6 (1990), 539-546.
7. Harrison, M., Ruzzo, W., and Ullman, J. Protection in operating systems. Communications of the ACM 19, 8 (1976), 461-471.
8. Kudo, M., and Hada, S. XML document security based on provisional authorization. In Proceedings of the 7th ACM conference on Computer and communications security (2000), pp. 87-96.
9. MacKinnon, S., Taylor, P., Meijer, H., and Akl, S. An optimal algorithm for assigning cryptographic keys to control access in a hierarchy. IEEE Transactions on Computers C-34, 9 (1985), 797-802.
10. Miklau, G., and Suciu, D. Controlling access to published data using cryptography. In Proceedings of 29th International Conference on Very Large Data Bases (VLDB 2003) (2003), pp. 898-909.
11. Miklau, G., and Suciu, D. Containment and equivalence for a fragment of XPath. Journal of the ACM 51, 1 (2004), 2-45.
12. Neven, F., and Schwentick, T. XPath containment in the presence of disjunction, DTDs, and variables. In Proceedings of 9th International Conference on Database Theory (ICDT 2003) (2003), pp. 315-329.
13. OASIS. Assertions and Protocols for the OASIS Security Assertion Markup Language, 2003. OASIS Committee Specification: E. Maler, P. Mishra and R. Philpott (editors).
14. OASIS. eXtensible Access Control Markup Language (XACML) Version 1.1, 2003. OASIS Committee Specification: S. Godik and T. Moses (editors).
15. Rabin, M. Digitalized signatures and public-key functions as intractable as factorization. Tech. Rep. TR-212, Laboratory for Computer Science, Massachusetts Institute of Technology, Cambridge, Massachusetts, 1979.
16. Ray, I., Ray, I., and Narasimhamurthi, N. A cryptographic solution to implement access control in a hierarchy and more. In Proceedings of the Seventh ACM Symposium on Access Control Models and Technologies (2002), pp. 65-73.
17. Tzeng, W.-G. A time-bound cryptographic key assignment scheme for access control in a hierarchy. IEEE Transactions on Knowledge and Data Engineering 14, 1 (2002), 182-188.
18. Wadler, P. A formal semantics of patterns in XSLT and XPath. Markup Languages: Theory and Practice 2, 2 (2000), 183-202.
19. Wood, P. Containment for XPath fragments under DTD constraints. In Proceedings of 9th International Conference on Database Theory (ICDT 2003) (2003), pp. 300-314.
20. World Wide Web Consortium. XML Path Language (XPath) Version 1.0, 1999. J. Clark and S. DeRose (editors).
21. World Wide Web Consortium. XSL Transformations (XSLT) Version 1.0, 1999. J. Clark (editor).
22. World Wide Web Consortium. XML-Signature Syntax and Processing, 2002. W3C Recommendation, D. Eastlake, J. Reagle and D. Solo (authors).
23. World Wide Web Consortium. XML-Signature XPath Filter 2.0, 2002. W3C Recommendation, J. Boyer, M. Hughes and J. Reagle (authors).
24. World Wide Web Consortium. XML Encryption Syntax and Processing, 2003. W3C Recommendation, D. Eastlake and J. Reagle (editors).
25. Yi, X., and Ye, Y. Security of Tzeng's time-bound key assignment scheme for access control in a hierarchy. IEEE Transactions on Knowledge and Data Engineering 15, 4 (2003), 1054-1055.