Content-Based, Context-Aware Role Based Access Control for Secure Distributed XML Applications

本项目将为分布式异构多企业环境中基于XML的应用程序开发一个全面的安全框架，该框架使用基于内容和上下文感知的访问控制模型。这些应用包括电子商务、金融和银行、制造业、公司数据库、保健和其他联机服务和商业。对于这些应用，由于在做出访问请求时获得的信息、时间、位置和其他上下文信息的内容的敏感性、重要性或相关性，可能需要限制信息访问。拟议的框架将建立在基于角色的访问控制（RBAC）模型。在这个项目中，以下任务将进行：开发一个基于内容和上下文的广义时态RBAC模型（CC-GTRBAC）的XML文档和扩展的XML语言的建议模型。扩展的语言将被用来开发一个安全模型，该模型将允许在各个级别（包括概念、XML模式和XML实例级别）上保护XML文档源。扩展CC-GTRBAC以开发用于分布式XML文档的安全多企业环境。开发了一个分布式XML环境的实验原型，以检查本研究的有效性和可行性。

This project will develop a comprehensive security framework using content-based and context-aware access control models for XML-based applications in distributed heterogeneous multi-enterprise environments. Such applications include electronic commerce, finance and banking, manufacturing, corporate databases, health-care and other on-line services and businesses. For these applications, information access may need to be restricted due to the sensitivity, importance or the relevance of the content of the information, time, location and other contextual information obtained at the time the access requests are made. The proposed framework will be built upon role-based access control (RBAC) models. In this project the following tasks will be pursued:development of a content and context-based generalized temporal RBAC model (CC-GTRBAC) for XML documents and extension of XML language for the proposed model. The extended language will be used to develop a security model that will allow protection of XML document sources at various levels including conceptual, XML schema and XML instance levels.extending CC-GTRBAC to develop a secure multi-enterprise environment for distributed XML documents. development of an experimental prototype of a distributed XML environment to check the efficacy and viability of this research.