title: An action-based fine-grained access control mechanism for structured documents and its application.
abstract: This paper presents an action-based fine-grained access control mechanism for structured documents. Firstly, we define a describing model for structured documents and analyze the application scenarios. The describing model could support the permission management on chapters, pages, sections, words, and pictures of structured documents. Secondly, based on the action-based access control (ABAC) model, we propose a fine-grained control protocol for structured documents by introducing temporal state and environmental state. The protocol covering different stages from document creation, to permission specification and usage control are given by using the Z-notation. Finally, we give the implementation of our mechanism and make the comparisons between the existing methods and our mechanism. The result shows that our mechanism could provide the better solution of fine-grained access control for structured documents in complicated networks. Moreover, it is more flexible and practical.
authors.affiliation: State Key Laboratory of Integrated Services Network, Xidian University, Xi'an 710071, China.
authors.forename: Mang
authors.initials: M
authors.lastname: Su
authors.affiliation: State Key Laboratory of Information Security, Institute of Information Engineering, Chinese Academy of Sciences, Beijing 100093, China.
authors.forename: Fenghua
authors.initials: F
authors.lastname: Li
authors.affiliation: Institute of Computer Science & Technology, Peking University, Beijing 100080, China.
authors.forename: Zhi
authors.initials: Z
authors.lastname: Tang
authors.affiliation: Institute of Computer Science & Technology, Peking University, Beijing 100080, China.
authors.forename: Yinyan
authors.initials: Y
authors.lastname: Yu
authors.affiliation: Liverpool John Moores University, Liverpool L3 3AF, UK.
authors.forename: Bo
authors.initials: B
authors.lastname: Zhou
mesh_terms: D003628:Database Management Systems; D008962:Models, Theoretical