Content-Based, Context-Aware Role Based Access Control for Secure Distributed XML Applications

用于安全分布式 XML 应用程序的基于内容、上下文感知、基于角色的访问控制

• 批准号: 0242419
• 负责人: Arif Ghafoor
• 金额: $ 30万
• 依托单位: Purdue University
• 依托单位国家: 美国
• 项目类别: Standard Grant
• 财政年份: 2003
• 资助国家: 美国
• 起止时间: 2003-07-01 至 2009-06-30
• 项目状态: 已结题
• 来源: https://www.nsf.gov/awardsearch/showAward?AWD_ID=0242419&HistoricalAwards=false
• 关键词: Content; Based; Context; Aware; Role

This project will develop a comprehensive security framework using content-based and context-aware access control models for XML-based applications in distributed heterogeneous multi-enterprise environments. Such applications include electronic commerce, finance and banking, manufacturing, corporate databases, health-care and other on-line services and businesses. For these applications, information access may need to be restricted due to the sensitivity, importance or the relevance of the content of the information, time, location and other contextual information obtained at the time the access requests are made. The proposed framework will be built upon role-based access control (RBAC) models. In this project the following tasks will be pursued:development of a content and context-based generalized temporal RBAC model (CC-GTRBAC) for XML documents and extension of XML language for the proposed model. The extended language will be used to develop a security model that will allow protection of XML document sources at various levels including conceptual, XML schema and XML instance levels.extending CC-GTRBAC to develop a secure multi-enterprise environment for distributed XML documents. development of an experimental prototype of a distributed XML environment to check the efficacy and viability of this research.

该项目将使用基于内容和上下文感知的访问控制模型为分布式异构多企业环境中基于 XML 的应用程序开发一个全面的安全框架。此类应用包括电子商务、金融和银行、制造、企业数据库、医疗保健和其他在线服务和业务。对于这些应用，由于信息内容的敏感性、重要性或相关性、时间、位置以及在做出访问请求时获得的其他上下文信息，可能需要限制信息访问。拟议的框架将建立在基于角色的访问控制（RBAC）模型的基础上。在该项目中，将完成以下任务：开发用于 XML 文档的基于内容和上下文的广义时态 RBAC 模型（CC-GTRBAC），并为所提出的模型扩展 XML 语言。扩展语言将用于开发一个安全模型，该模型将允许在各个级别（包括概念级别、XML 模式级别和 XML 实例级别）保护 XML 文档源。扩展 CC-GTRBAC 来为分布式 XML 文档开发安全的多企业环境。开发分布式 XML 环境的实验原型来检查本研究的有效性和可行性。