Efficient Filtering System to accelerate XML Access Control Enforcement

Abstract—This work is a proposal for an efficient yet secure XML access control enforcement which has been specifically designed to support fine-grained security policy. Without a structural summary, to ensure that user queries only use and return XML data the user is allowed to access can be quite inefficient in checking user queries and in traversing for XPath queries with the self-or-descendant axis(“//”). In this paper, we propose the SQ-Filter based on metadata in the DTD. SQ-Filter is a pre-processing method to rewrite user query by extending/eliminating query tree nodes and by injecting operators combining set of nodes from the user query point of view. Experimental results clearly demonstrate that our approach is efficient