XML Access Control: from XACML to Annotated Schemas
Identifieur interne : 002972 ( Main/Exploration ); précédent : 002971; suivant : 002973XML Access Control: from XACML to Annotated Schemas
Auteurs : Ryma Abassi [Tunisie] ; Florent Jacquemard [France] ; Michael Rusinowitch [France] ; Sihem Guemara El Fatmi [Tunisie]Source :
Descripteurs français
- Wicri :
- topic : Extensible Markup Language.
English descriptors
- mix :
- Annotation, Tree Automata, XACML, XML, XPath.
Abstract
XML became the de facto standard for the data representation and exchange on the internet. Regarding XML documents access control policy definition, OASIS ratified the XACML standard. It is a declarative language allowing the specification of authorizations as rules. Furthermore, it is common to formally represent XML documents as labeled trees and to handle secure requests through “user views”. A user view is the part of the document accessible to a given user according to the existing policy. Moreover, control access polices can be depicted as annotated rules where annotations define for each document node whether it is accessible. Hence, an annotated schema is a formal representation of “user views”. Our main contribution in this paper is then three folds. First, we compare XACML policies and annotated schemas. Second, we identify a significant fragment of XACML since this latter is very expressive and consequently complex. Third, we define adequate translation algorithms from XACML policies to annotated schemas.
Url:
DOI: 10.1109/COMNET.2010.5699810
Affiliations:
- France, Tunisie
- Franche-Comté, Grand Est, Lorraine (région)
- Belfort, Besançon, Nancy
- Institut national polytechnique de Lorraine, Université Nancy 2, Université de Bourgogne Franche-Comté, Université de Franche-Comté, Université de Lorraine, Université de technologie de Belfort-Montbéliard
Links toward previous steps (curation, corpus...)
- to stream Hal, to step Corpus: 005427
- to stream Hal, to step Curation: 005427
- to stream Hal, to step Checkpoint: 002208
- to stream Main, to step Merge: 002A35
- to stream Main, to step Curation: 002972
Le document en format XML
<record><TEI><teiHeader><fileDesc><titleStmt><title xml:lang="en">XML Access Control: from XACML to Annotated Schemas</title><author><name sortKey="Abassi, Ryma" sort="Abassi, Ryma" uniqKey="Abassi R" first="Ryma" last="Abassi">Ryma Abassi</name><affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-105022" status="VALID"><orgName>Ecole supérieure des télécommunications de Tunis</orgName><orgName type="acronym">SUP'COM [TUNIS]</orgName><desc><address><addrLine>SUP'COM Cité Technologique des Communications Route de Raoued Km 3,5 2083 El Ghazala Ariana</addrLine><country key="TN"></country></address><ref type="url">http://www.supcom.mincom.tn/fr/</ref></desc><listRelation><relation active="#struct-364754" type="direct"></relation></listRelation><tutelles><tutelle active="#struct-364754" type="direct"><org type="institution" xml:id="struct-364754" status="INCOMING"><orgName>SUP'COM</orgName><desc><address><country key="FR"></country></address></desc></org></tutelle></tutelles></hal:affiliation><country>Tunisie</country></affiliation></author><author><name sortKey="Jacquemard, Florent" sort="Jacquemard, Florent" uniqKey="Jacquemard F" first="Florent" last="Jacquemard">Florent Jacquemard</name><affiliation wicri:level="1"><hal:affiliation type="researchteam" xml:id="struct-56043" status="VALID"><idno type="RNSR">200818998V</idno><orgName>Verification in databases</orgName><orgName type="acronym">DAHU</orgName><desc><address><addrLine>LSV ENS de Cachan 61 avenue du Président Wilson 94235 CACHAN Cedex FRANCE</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/equipes/dahu</ref></desc><listRelation><relation active="#struct-2571" type="direct"></relation><relation name="UMR8643" active="#struct-441569" type="direct"></relation><relation active="#struct-6862" type="direct"></relation><relation active="#struct-118511" type="direct"></relation><relation active="#struct-300009" type="indirect"></relation></listRelation><tutelles><tutelle active="#struct-2571" type="direct"><org type="laboratory" xml:id="struct-2571" status="VALID"><orgName>Laboratoire Spécification et Vérification [Cachan]</orgName><orgName type="acronym">LSV</orgName><desc><address><addrLine>Bâtiment d'Alembert 61 Avenue du Président Wilson 94235 CACHAN CEDEX</addrLine><country key="FR"></country></address><ref type="url">http://www.lsv.ens-cachan.fr/</ref></desc><listRelation><relation active="#struct-6862" type="direct"></relation><relation name="UMR8643" active="#struct-441569" type="direct"></relation></listRelation></org></tutelle><tutelle name="UMR8643" active="#struct-441569" type="direct"><org type="institution" xml:id="struct-441569" status="VALID"><idno type="ISNI">0000000122597504</idno><idno type="IdRef">02636817X</idno><orgName>Centre National de la Recherche Scientifique</orgName><orgName type="acronym">CNRS</orgName><date type="start">1939-10-19</date><desc><address><country key="FR"></country></address><ref type="url">http://www.cnrs.fr/</ref></desc></org></tutelle><tutelle active="#struct-6862" type="direct"><org type="institution" xml:id="struct-6862" status="VALID"><orgName>École normale supérieure - Cachan</orgName><orgName type="acronym">ENS Cachan</orgName><desc><address><addrLine>61, avenue du Président Wilson - 94230 Cachan</addrLine><country key="FR"></country></address><ref type="url">http://www.ens-cachan.fr/</ref></desc></org></tutelle><tutelle active="#struct-118511" type="direct"><org type="laboratory" xml:id="struct-118511" status="VALID"><idno type="RNSR">200818248E</idno><orgName>INRIA Saclay - Ile de France</orgName><desc><address><addrLine>1 rue Honoré d'Estienne d'OrvesBâtiment Alan TuringCampus de l'École Polytechnique91120 Palaiseau</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/centre/saclay</ref></desc><listRelation><relation active="#struct-300009" type="direct"></relation></listRelation></org></tutelle><tutelle active="#struct-300009" type="indirect"><org type="institution" xml:id="struct-300009" status="VALID"><orgName>Institut National de Recherche en Informatique et en Automatique</orgName><orgName type="acronym">Inria</orgName><desc><address><addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/en/</ref></desc></org></tutelle></tutelles></hal:affiliation><country>France</country></affiliation></author><author><name sortKey="Rusinowitch, Michael" sort="Rusinowitch, Michael" uniqKey="Rusinowitch M" first="Michael" last="Rusinowitch">Michael Rusinowitch</name><affiliation wicri:level="1"><hal:affiliation type="researchteam" xml:id="struct-2366" status="OLD"><idno type="RNSR">200318302K</idno><orgName>Combination of approaches to the security of infinite states systems</orgName><orgName type="acronym">CASSIS</orgName><desc><address><country key="FR"></country></address><ref type="url">http://www.inria.fr/equipes/cassis</ref></desc><listRelation><relation active="#struct-160" type="direct"></relation><relation name="UMR7503" active="#struct-441569" type="indirect"></relation><relation active="#struct-300009" type="indirect"></relation><relation active="#struct-300291" type="indirect"></relation><relation active="#struct-300292" type="indirect"></relation><relation active="#struct-300293" type="indirect"></relation><relation active="#struct-866" type="direct"></relation><relation active="#struct-242365" type="indirect"></relation><relation active="#struct-300261" type="indirect"></relation><relation active="#struct-300360" type="indirect"></relation><relation name="UMR6174" active="#struct-441569" type="indirect"></relation><relation active="#struct-2496" type="direct"></relation></listRelation><tutelles><tutelle active="#struct-160" type="direct"><org type="laboratory" xml:id="struct-160" status="OLD"><orgName>Laboratoire Lorrain de Recherche en Informatique et ses Applications</orgName><orgName type="acronym">LORIA</orgName><desc><address><addrLine>Campus Scientifique BP 239 54506 Vandoeuvre-lès-Nancy Cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.loria.fr</ref></desc><listRelation><relation name="UMR7503" active="#struct-441569" type="direct"></relation><relation active="#struct-300009" type="direct"></relation><relation active="#struct-300291" type="direct"></relation><relation active="#struct-300292" type="direct"></relation><relation active="#struct-300293" type="direct"></relation></listRelation></org></tutelle><tutelle name="UMR7503" active="#struct-441569" type="indirect"><org type="institution" xml:id="struct-441569" status="VALID"><idno type="ISNI">0000000122597504</idno><idno type="IdRef">02636817X</idno><orgName>Centre National de la Recherche Scientifique</orgName><orgName type="acronym">CNRS</orgName><date type="start">1939-10-19</date><desc><address><country key="FR"></country></address><ref type="url">http://www.cnrs.fr/</ref></desc></org></tutelle><tutelle active="#struct-300009" type="indirect"><org type="institution" xml:id="struct-300009" status="VALID"><orgName>Institut National de Recherche en Informatique et en Automatique</orgName><orgName type="acronym">Inria</orgName><desc><address><addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/en/</ref></desc></org></tutelle><tutelle active="#struct-300291" type="indirect"><org type="institution" xml:id="struct-300291" status="OLD"><orgName>Université Henri Poincaré - Nancy 1</orgName><orgName type="acronym">UHP</orgName><date type="end">2011-12-31</date><desc><address><addrLine>24-30 rue Lionnois, BP 60120, 54 003 NANCY cedex, France</addrLine><country key="FR"></country></address></desc></org></tutelle><tutelle active="#struct-300292" type="indirect"><org type="institution" xml:id="struct-300292" status="OLD"><orgName>Université Nancy 2</orgName><date type="end">2011-12-31</date><desc><address><addrLine>91 avenue de la Libération, BP 454, 54001 Nancy cedex</addrLine><country key="FR"></country></address></desc></org></tutelle><tutelle active="#struct-300293" type="indirect"><org type="institution" xml:id="struct-300293" status="OLD"><orgName>Institut National Polytechnique de Lorraine</orgName><orgName type="acronym">INPL</orgName><date type="end">2011-12-31</date><desc><address><country key="FR"></country></address></desc></org></tutelle><tutelle active="#struct-866" type="direct"><org type="laboratory" xml:id="struct-866" status="VALID"><idno type="IdRef">152639071</idno><idno type="RNSR">200412232H</idno><orgName>Franche-Comté Électronique Mécanique, Thermique et Optique - Sciences et Technologies</orgName><orgName type="acronym">FEMTO-ST</orgName><desc><address><addrLine>32 avenue de l'Observatoire 25044 BESANCON CEDEX</addrLine><country key="FR"></country></address><ref type="url">http://www.femto-st.fr</ref></desc><listRelation><relation active="#struct-242365" type="direct"></relation><relation active="#struct-300261" type="direct"></relation><relation active="#struct-300360" type="direct"></relation><relation name="UMR6174" active="#struct-441569" type="direct"></relation></listRelation></org></tutelle><tutelle active="#struct-242365" type="indirect"><org type="institution" xml:id="struct-242365" status="VALID"><idno type="IdRef">026403188</idno><idno type="ISNI">0000 0001 2188 3779 </idno><orgName>Université de Franche-Comté</orgName><orgName type="acronym">UFC</orgName><desc><address><country key="FR"></country></address><ref type="url">http://www.univ-fcomte.fr</ref></desc></org></tutelle><tutelle active="#struct-300261" type="indirect"><org type="institution" xml:id="struct-300261" status="VALID"><orgName>Université de Technologie de Belfort-Montbeliard</orgName><orgName type="acronym">UTBM</orgName><desc><address><country key="FR"></country></address></desc></org></tutelle><tutelle active="#struct-300360" type="indirect"><org type="institution" xml:id="struct-300360" status="VALID"><orgName>Ecole Nationale Supérieure de Mécanique et des Microtechniques</orgName><orgName type="acronym">ENSMM</orgName><desc><address><country key="FR"></country></address></desc></org></tutelle><tutelle name="UMR6174" active="#struct-441569" type="indirect"><org type="institution" xml:id="struct-441569" status="VALID"><idno type="ISNI">0000000122597504</idno><idno type="IdRef">02636817X</idno><orgName>Centre National de la Recherche Scientifique</orgName><orgName type="acronym">CNRS</orgName><date type="start">1939-10-19</date><desc><address><country key="FR"></country></address><ref type="url">http://www.cnrs.fr/</ref></desc></org></tutelle><tutelle active="#struct-2496" type="direct"><org type="laboratory" xml:id="struct-2496" status="OLD"><orgName>INRIA Lorraine</orgName><desc><address><addrLine>615 rue du Jardin Botanique 54600 Villers-lès-Nancy</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/centre-de-recherche-inria/nancy-grand-est</ref></desc><listRelation><relation active="#struct-300009" type="direct"></relation></listRelation></org></tutelle></tutelles></hal:affiliation><country>France</country><placeName><settlement type="city">Nancy</settlement><region type="region" nuts="2">Grand Est</region><region type="old region" nuts="2">Lorraine (région)</region></placeName><orgName type="university">Université Nancy 2</orgName><orgName type="institution" wicri:auto="newGroup">Université de Lorraine</orgName><placeName><settlement type="city">Nancy</settlement><region type="region" nuts="2">Grand Est</region><region type="old region" nuts="2">Lorraine (région)</region></placeName><orgName type="university">Institut national polytechnique de Lorraine</orgName><orgName type="institution" wicri:auto="newGroup">Université de Lorraine</orgName><placeName><settlement type="city" wicri:auto="siege">Besançon</settlement><region type="region" nuts="2">Franche-Comté</region></placeName><orgName type="university">Université de Franche-Comté</orgName><orgName type="institution" wicri:auto="newGroup">Université de Bourgogne Franche-Comté</orgName><placeName><settlement type="city" wicri:auto="siege">Belfort</settlement><region type="region" nuts="2">Franche-Comté</region></placeName><orgName type="university">Université de technologie de Belfort-Montbéliard</orgName></affiliation></author><author><name sortKey="El Fatmi, Sihem Guemara" sort="El Fatmi, Sihem Guemara" uniqKey="El Fatmi S" first="Sihem Guemara" last="El Fatmi">Sihem Guemara El Fatmi</name><affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-105022" status="VALID"><orgName>Ecole supérieure des télécommunications de Tunis</orgName><orgName type="acronym">SUP'COM [TUNIS]</orgName><desc><address><addrLine>SUP'COM Cité Technologique des Communications Route de Raoued Km 3,5 2083 El Ghazala Ariana</addrLine><country key="TN"></country></address><ref type="url">http://www.supcom.mincom.tn/fr/</ref></desc><listRelation><relation active="#struct-364754" type="direct"></relation></listRelation><tutelles><tutelle active="#struct-364754" type="direct"><org type="institution" xml:id="struct-364754" status="INCOMING"><orgName>SUP'COM</orgName><desc><address><country key="FR"></country></address></desc></org></tutelle></tutelles></hal:affiliation><country>Tunisie</country></affiliation></author></titleStmt><publicationStmt><idno type="wicri:source">HAL</idno><idno type="RBID">Hal:inria-00578884</idno><idno type="halId">inria-00578884</idno><idno type="halUri">https://hal.inria.fr/inria-00578884</idno><idno type="url">https://hal.inria.fr/inria-00578884</idno><idno type="doi">10.1109/COMNET.2010.5699810</idno><date when="2010-11-04">2010-11-04</date><idno type="wicri:Area/Hal/Corpus">005427</idno><idno type="wicri:Area/Hal/Curation">005427</idno><idno type="wicri:Area/Hal/Checkpoint">002208</idno><idno type="wicri:explorRef" wicri:stream="Hal" wicri:step="Checkpoint">002208</idno><idno type="wicri:Area/Main/Merge">002A35</idno><idno type="wicri:Area/Main/Curation">002972</idno><idno type="wicri:Area/Main/Exploration">002972</idno></publicationStmt><sourceDesc><biblStruct><analytic><title xml:lang="en">XML Access Control: from XACML to Annotated Schemas</title><author><name sortKey="Abassi, Ryma" sort="Abassi, Ryma" uniqKey="Abassi R" first="Ryma" last="Abassi">Ryma Abassi</name><affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-105022" status="VALID"><orgName>Ecole supérieure des télécommunications de Tunis</orgName><orgName type="acronym">SUP'COM [TUNIS]</orgName><desc><address><addrLine>SUP'COM Cité Technologique des Communications Route de Raoued Km 3,5 2083 El Ghazala Ariana</addrLine><country key="TN"></country></address><ref type="url">http://www.supcom.mincom.tn/fr/</ref></desc><listRelation><relation active="#struct-364754" type="direct"></relation></listRelation><tutelles><tutelle active="#struct-364754" type="direct"><org type="institution" xml:id="struct-364754" status="INCOMING"><orgName>SUP'COM</orgName><desc><address><country key="FR"></country></address></desc></org></tutelle></tutelles></hal:affiliation><country>Tunisie</country></affiliation></author><author><name sortKey="Jacquemard, Florent" sort="Jacquemard, Florent" uniqKey="Jacquemard F" first="Florent" last="Jacquemard">Florent Jacquemard</name><affiliation wicri:level="1"><hal:affiliation type="researchteam" xml:id="struct-56043" status="VALID"><idno type="RNSR">200818998V</idno><orgName>Verification in databases</orgName><orgName type="acronym">DAHU</orgName><desc><address><addrLine>LSV ENS de Cachan 61 avenue du Président Wilson 94235 CACHAN Cedex FRANCE</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/equipes/dahu</ref></desc><listRelation><relation active="#struct-2571" type="direct"></relation><relation name="UMR8643" active="#struct-441569" type="direct"></relation><relation active="#struct-6862" type="direct"></relation><relation active="#struct-118511" type="direct"></relation><relation active="#struct-300009" type="indirect"></relation></listRelation><tutelles><tutelle active="#struct-2571" type="direct"><org type="laboratory" xml:id="struct-2571" status="VALID"><orgName>Laboratoire Spécification et Vérification [Cachan]</orgName><orgName type="acronym">LSV</orgName><desc><address><addrLine>Bâtiment d'Alembert 61 Avenue du Président Wilson 94235 CACHAN CEDEX</addrLine><country key="FR"></country></address><ref type="url">http://www.lsv.ens-cachan.fr/</ref></desc><listRelation><relation active="#struct-6862" type="direct"></relation><relation name="UMR8643" active="#struct-441569" type="direct"></relation></listRelation></org></tutelle><tutelle name="UMR8643" active="#struct-441569" type="direct"><org type="institution" xml:id="struct-441569" status="VALID"><idno type="ISNI">0000000122597504</idno><idno type="IdRef">02636817X</idno><orgName>Centre National de la Recherche Scientifique</orgName><orgName type="acronym">CNRS</orgName><date type="start">1939-10-19</date><desc><address><country key="FR"></country></address><ref type="url">http://www.cnrs.fr/</ref></desc></org></tutelle><tutelle active="#struct-6862" type="direct"><org type="institution" xml:id="struct-6862" status="VALID"><orgName>École normale supérieure - Cachan</orgName><orgName type="acronym">ENS Cachan</orgName><desc><address><addrLine>61, avenue du Président Wilson - 94230 Cachan</addrLine><country key="FR"></country></address><ref type="url">http://www.ens-cachan.fr/</ref></desc></org></tutelle><tutelle active="#struct-118511" type="direct"><org type="laboratory" xml:id="struct-118511" status="VALID"><idno type="RNSR">200818248E</idno><orgName>INRIA Saclay - Ile de France</orgName><desc><address><addrLine>1 rue Honoré d'Estienne d'OrvesBâtiment Alan TuringCampus de l'École Polytechnique91120 Palaiseau</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/centre/saclay</ref></desc><listRelation><relation active="#struct-300009" type="direct"></relation></listRelation></org></tutelle><tutelle active="#struct-300009" type="indirect"><org type="institution" xml:id="struct-300009" status="VALID"><orgName>Institut National de Recherche en Informatique et en Automatique</orgName><orgName type="acronym">Inria</orgName><desc><address><addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/en/</ref></desc></org></tutelle></tutelles></hal:affiliation><country>France</country></affiliation></author><author><name sortKey="Rusinowitch, Michael" sort="Rusinowitch, Michael" uniqKey="Rusinowitch M" first="Michael" last="Rusinowitch">Michael Rusinowitch</name><affiliation wicri:level="1"><hal:affiliation type="researchteam" xml:id="struct-2366" status="OLD"><idno type="RNSR">200318302K</idno><orgName>Combination of approaches to the security of infinite states systems</orgName><orgName type="acronym">CASSIS</orgName><desc><address><country key="FR"></country></address><ref type="url">http://www.inria.fr/equipes/cassis</ref></desc><listRelation><relation active="#struct-160" type="direct"></relation><relation name="UMR7503" active="#struct-441569" type="indirect"></relation><relation active="#struct-300009" type="indirect"></relation><relation active="#struct-300291" type="indirect"></relation><relation active="#struct-300292" type="indirect"></relation><relation active="#struct-300293" type="indirect"></relation><relation active="#struct-866" type="direct"></relation><relation active="#struct-242365" type="indirect"></relation><relation active="#struct-300261" type="indirect"></relation><relation active="#struct-300360" type="indirect"></relation><relation name="UMR6174" active="#struct-441569" type="indirect"></relation><relation active="#struct-2496" type="direct"></relation></listRelation><tutelles><tutelle active="#struct-160" type="direct"><org type="laboratory" xml:id="struct-160" status="OLD"><orgName>Laboratoire Lorrain de Recherche en Informatique et ses Applications</orgName><orgName type="acronym">LORIA</orgName><desc><address><addrLine>Campus Scientifique BP 239 54506 Vandoeuvre-lès-Nancy Cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.loria.fr</ref></desc><listRelation><relation name="UMR7503" active="#struct-441569" type="direct"></relation><relation active="#struct-300009" type="direct"></relation><relation active="#struct-300291" type="direct"></relation><relation active="#struct-300292" type="direct"></relation><relation active="#struct-300293" type="direct"></relation></listRelation></org></tutelle><tutelle name="UMR7503" active="#struct-441569" type="indirect"><org type="institution" xml:id="struct-441569" status="VALID"><idno type="ISNI">0000000122597504</idno><idno type="IdRef">02636817X</idno><orgName>Centre National de la Recherche Scientifique</orgName><orgName type="acronym">CNRS</orgName><date type="start">1939-10-19</date><desc><address><country key="FR"></country></address><ref type="url">http://www.cnrs.fr/</ref></desc></org></tutelle><tutelle active="#struct-300009" type="indirect"><org type="institution" xml:id="struct-300009" status="VALID"><orgName>Institut National de Recherche en Informatique et en Automatique</orgName><orgName type="acronym">Inria</orgName><desc><address><addrLine>Domaine de VoluceauRocquencourt - BP 10578153 Le Chesnay Cedex</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/en/</ref></desc></org></tutelle><tutelle active="#struct-300291" type="indirect"><org type="institution" xml:id="struct-300291" status="OLD"><orgName>Université Henri Poincaré - Nancy 1</orgName><orgName type="acronym">UHP</orgName><date type="end">2011-12-31</date><desc><address><addrLine>24-30 rue Lionnois, BP 60120, 54 003 NANCY cedex, France</addrLine><country key="FR"></country></address></desc></org></tutelle><tutelle active="#struct-300292" type="indirect"><org type="institution" xml:id="struct-300292" status="OLD"><orgName>Université Nancy 2</orgName><date type="end">2011-12-31</date><desc><address><addrLine>91 avenue de la Libération, BP 454, 54001 Nancy cedex</addrLine><country key="FR"></country></address></desc></org></tutelle><tutelle active="#struct-300293" type="indirect"><org type="institution" xml:id="struct-300293" status="OLD"><orgName>Institut National Polytechnique de Lorraine</orgName><orgName type="acronym">INPL</orgName><date type="end">2011-12-31</date><desc><address><country key="FR"></country></address></desc></org></tutelle><tutelle active="#struct-866" type="direct"><org type="laboratory" xml:id="struct-866" status="VALID"><idno type="IdRef">152639071</idno><idno type="RNSR">200412232H</idno><orgName>Franche-Comté Électronique Mécanique, Thermique et Optique - Sciences et Technologies</orgName><orgName type="acronym">FEMTO-ST</orgName><desc><address><addrLine>32 avenue de l'Observatoire 25044 BESANCON CEDEX</addrLine><country key="FR"></country></address><ref type="url">http://www.femto-st.fr</ref></desc><listRelation><relation active="#struct-242365" type="direct"></relation><relation active="#struct-300261" type="direct"></relation><relation active="#struct-300360" type="direct"></relation><relation name="UMR6174" active="#struct-441569" type="direct"></relation></listRelation></org></tutelle><tutelle active="#struct-242365" type="indirect"><org type="institution" xml:id="struct-242365" status="VALID"><idno type="IdRef">026403188</idno><idno type="ISNI">0000 0001 2188 3779 </idno><orgName>Université de Franche-Comté</orgName><orgName type="acronym">UFC</orgName><desc><address><country key="FR"></country></address><ref type="url">http://www.univ-fcomte.fr</ref></desc></org></tutelle><tutelle active="#struct-300261" type="indirect"><org type="institution" xml:id="struct-300261" status="VALID"><orgName>Université de Technologie de Belfort-Montbeliard</orgName><orgName type="acronym">UTBM</orgName><desc><address><country key="FR"></country></address></desc></org></tutelle><tutelle active="#struct-300360" type="indirect"><org type="institution" xml:id="struct-300360" status="VALID"><orgName>Ecole Nationale Supérieure de Mécanique et des Microtechniques</orgName><orgName type="acronym">ENSMM</orgName><desc><address><country key="FR"></country></address></desc></org></tutelle><tutelle name="UMR6174" active="#struct-441569" type="indirect"><org type="institution" xml:id="struct-441569" status="VALID"><idno type="ISNI">0000000122597504</idno><idno type="IdRef">02636817X</idno><orgName>Centre National de la Recherche Scientifique</orgName><orgName type="acronym">CNRS</orgName><date type="start">1939-10-19</date><desc><address><country key="FR"></country></address><ref type="url">http://www.cnrs.fr/</ref></desc></org></tutelle><tutelle active="#struct-2496" type="direct"><org type="laboratory" xml:id="struct-2496" status="OLD"><orgName>INRIA Lorraine</orgName><desc><address><addrLine>615 rue du Jardin Botanique 54600 Villers-lès-Nancy</addrLine><country key="FR"></country></address><ref type="url">http://www.inria.fr/centre-de-recherche-inria/nancy-grand-est</ref></desc><listRelation><relation active="#struct-300009" type="direct"></relation></listRelation></org></tutelle></tutelles></hal:affiliation><country>France</country><placeName><settlement type="city">Nancy</settlement><region type="region" nuts="2">Grand Est</region><region type="old region" nuts="2">Lorraine (région)</region></placeName><orgName type="university">Université Nancy 2</orgName><orgName type="institution" wicri:auto="newGroup">Université de Lorraine</orgName><placeName><settlement type="city">Nancy</settlement><region type="region" nuts="2">Grand Est</region><region type="old region" nuts="2">Lorraine (région)</region></placeName><orgName type="university">Institut national polytechnique de Lorraine</orgName><orgName type="institution" wicri:auto="newGroup">Université de Lorraine</orgName><placeName><settlement type="city" wicri:auto="siege">Besançon</settlement><region type="region" nuts="2">Franche-Comté</region></placeName><orgName type="university">Université de Franche-Comté</orgName><orgName type="institution" wicri:auto="newGroup">Université de Bourgogne Franche-Comté</orgName><placeName><settlement type="city" wicri:auto="siege">Belfort</settlement><region type="region" nuts="2">Franche-Comté</region></placeName><orgName type="university">Université de technologie de Belfort-Montbéliard</orgName></affiliation></author><author><name sortKey="El Fatmi, Sihem Guemara" sort="El Fatmi, Sihem Guemara" uniqKey="El Fatmi S" first="Sihem Guemara" last="El Fatmi">Sihem Guemara El Fatmi</name><affiliation wicri:level="1"><hal:affiliation type="laboratory" xml:id="struct-105022" status="VALID"><orgName>Ecole supérieure des télécommunications de Tunis</orgName><orgName type="acronym">SUP'COM [TUNIS]</orgName><desc><address><addrLine>SUP'COM Cité Technologique des Communications Route de Raoued Km 3,5 2083 El Ghazala Ariana</addrLine><country key="TN"></country></address><ref type="url">http://www.supcom.mincom.tn/fr/</ref></desc><listRelation><relation active="#struct-364754" type="direct"></relation></listRelation><tutelles><tutelle active="#struct-364754" type="direct"><org type="institution" xml:id="struct-364754" status="INCOMING"><orgName>SUP'COM</orgName><desc><address><country key="FR"></country></address></desc></org></tutelle></tutelles></hal:affiliation><country>Tunisie</country></affiliation></author></analytic><idno type="DOI">10.1109/COMNET.2010.5699810</idno></biblStruct></sourceDesc></fileDesc><profileDesc><textClass><keywords scheme="mix" xml:lang="en"><term>Annotation</term><term>Tree Automata</term><term>XACML</term><term>XML</term><term>XPath</term></keywords><keywords scheme="Wicri" type="topic" xml:lang="fr"><term>Extensible Markup Language</term></keywords></textClass></profileDesc></teiHeader><front><div type="abstract" xml:lang="en">XML became the de facto standard for the data representation and exchange on the internet. Regarding XML documents access control policy definition, OASIS ratified the XACML standard. It is a declarative language allowing the specification of authorizations as rules. Furthermore, it is common to formally represent XML documents as labeled trees and to handle secure requests through “user views”. A user view is the part of the document accessible to a given user according to the existing policy. Moreover, control access polices can be depicted as annotated rules where annotations define for each document node whether it is accessible. Hence, an annotated schema is a formal representation of “user views”. Our main contribution in this paper is then three folds. First, we compare XACML policies and annotated schemas. Second, we identify a significant fragment of XACML since this latter is very expressive and consequently complex. Third, we define adequate translation algorithms from XACML policies to annotated schemas.</div></front></TEI><affiliations><list><country><li>France</li><li>Tunisie</li></country><region><li>Franche-Comté</li><li>Grand Est</li><li>Lorraine (région)</li></region><settlement><li>Belfort</li><li>Besançon</li><li>Nancy</li></settlement><orgName><li>Institut national polytechnique de Lorraine</li><li>Université Nancy 2</li><li>Université de Bourgogne Franche-Comté</li><li>Université de Franche-Comté</li><li>Université de Lorraine</li><li>Université de technologie de Belfort-Montbéliard</li></orgName></list><tree><country name="Tunisie"><noRegion><name sortKey="Abassi, Ryma" sort="Abassi, Ryma" uniqKey="Abassi R" first="Ryma" last="Abassi">Ryma Abassi</name></noRegion><name sortKey="El Fatmi, Sihem Guemara" sort="El Fatmi, Sihem Guemara" uniqKey="El Fatmi S" first="Sihem Guemara" last="El Fatmi">Sihem Guemara El Fatmi</name></country><country name="France"><noRegion><name sortKey="Jacquemard, Florent" sort="Jacquemard, Florent" uniqKey="Jacquemard F" first="Florent" last="Jacquemard">Florent Jacquemard</name></noRegion><name sortKey="Rusinowitch, Michael" sort="Rusinowitch, Michael" uniqKey="Rusinowitch M" first="Michael" last="Rusinowitch">Michael Rusinowitch</name></country></tree></affiliations></record>Pour manipuler ce document sous Unix (Dilib)
EXPLOR_STEP=$WICRI_ROOT/Wicri/Lorraine/explor/InforLorV4/Data/Main/Exploration
HfdSelect -h $EXPLOR_STEP/biblio.hfd -nk 002972 | SxmlIndent | more
Ou
HfdSelect -h $EXPLOR_AREA/Data/Main/Exploration/biblio.hfd -nk 002972 | SxmlIndent | more
Pour mettre un lien sur cette page dans le réseau Wicri
{{Explor lien
|wiki= Wicri/Lorraine
|area= InforLorV4
|flux= Main
|étape= Exploration
|type= RBID
|clé= Hal:inria-00578884
|texte= XML Access Control: from XACML to Annotated Schemas
}}
| This area was generated with Dilib version V0.6.33. |  |