An integrated access control for securely querying and updating XML data

Many existing access controls use node filtering or\ud querying rewriting techniques. These techniques require\ud rather time-consuming processes such as parsing,\ud labeling, pruning and/or rewriting queries into\ud safe ones each time a user requests a query or takes\ud an action. In this paper, we propose a fine-grained access\ud control model, named SecureX, which supports\ud read and write privileges. With our novel access control\ud concept, various access types are introduced, including\ud those for determining if a user has the right\ud to change XML structure. Furthermore, SecureX can\ud be integrated well with a dynamic labeling scheme\ud to eliminate repetitive labeling and pruning processes\ud when determining a user view. This brings about advantages\ud of speeding up searching and querying processes.\ud When comparing to a traditional node filtering\ud technique, our integrated access control model\ud takes less processing steps. Experiments have shown\ud effectiveness of our approach