NDLI: A fine-grained access control system for XML documents

Content Provider	ACM Digital Library
Author	Paraboschi, Stefano De capitani di vimercati, Sabrina Damiani, Ernesto Samarati, Pierangela
Copyright Year	2002
Abstract	Web-based applications greatly increase information availability and ease of access, which is optimal for public information. The distribution and sharing of information via the Web that must be accessed in a selective way, such as electronic commerce transactions, require the definition and enforcement of security controls, ensuring that information will be accessible only to authorized entities. Different approaches have been proposed that address the problem of protecting information in a Web system. However, these approaches typically operate at the file-system level, independently of the data that have to be protected from unauthorized accesses. Part of this problem is due to the limitations of HTML, historically used to design Web documents. The extensible markup language (XML), a markup language promoted by the World Wide Web Consortium (W3C), is de facto the standard language for the exchange of information on the Internet and represents an important opportunity to provide fine-grained access control. We present an access control model to protect information distributed on the Web that, by exploiting XML's own capabilities, allows the definition and enforcement of access restrictions directly on the structure and content of the documents. We present a language for the specification of access restrictions, which uses standard notations and concepts, together with a description of a system architecture for access control enforcement based on existing technology. The result is a flexible and powerful security system offering a simple integration with current solutions.
Starting Page	169
Ending Page	202
Page Count	34
File Format	PDF
ISSN	10949224
e-ISSN	15577406
DOI	10.1145/505586.505590
Volume Number	5
Issue Number	2
Journal	ACM Transactions on Information and System Security (TISSEC)
Language	English
Publisher	Association for Computing Machinery (ACM)
Publisher Date	2002-05-01
Publisher Place	New York
Access Restriction	One Nation One Subscription (ONOS)
Subject Keyword	Access control World Wide Web XML documents Authorizations specification and enforcement
Content Type	Text
Resource Type	Article
Subject	Computer Science Safety, Risk, Reliability and Quality

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

An authorization model for a public key management service

X-GTRBAC: an XML-based policy specification framework and architecture for enterprise-wide access control

Fine-Grained Two-Factor Access Control for Web-Based Cloud Computing Services

A fine-grained access control system for XML documents (2002)

Secure and selective dissemination of XML documents

A secure and private system for subscription-based remote services

Crowds: anonymity for Web transactions

Relevancy-based access control and its evaluation on versioned XML documents

A role-based access control model and reference implementation within a corporate intranet

A fine-grained access control system for XML documents

Similar Documents

An authorization model for a public key management service

X-GTRBAC: an XML-based policy specification framework and architecture for enterprise-wide access control

Fine-Grained Two-Factor Access Control for Web-Based Cloud Computing Services

A fine-grained access control system for XML documents (2002)

Secure and selective dissemination of XML documents

A secure and private system for subscription-based remote services

Crowds: anonymity for Web transactions

Relevancy-based access control and its evaluation on versioned XML documents

A role-based access control model and reference implementation within a corporate intranet

A fine-grained access control system for XML documents