XML data integrity based on concatenated hash function
Liu, B, Lu, J and Yip, YJ 2009, 'XML data integrity based on concatenated hash function' , International Journal of Computer Science and Information Security, 1 (1) , pp. 31-40.
|PDF - Published Version |
Available under License Creative Commons Attribution.
Download (111kB) | Preview
Data integrity is the fundamental for data authentication. A major problem for XML data authentication is that signed XML data can be copied to another document but still keep signature valid. This is caused by XML data integrity protecting. Through investigation, the paper discovered that besides data content integrity, XML data integrity should also protect element location information, and context referential integrity under fine-grained security situation. The aim of this paper is to propose a model for XML data integrity considering XML data features. The paper presents an XML data integrity model named as CSR (content integrity, structure integrity, context referential integrity) based on a concatenated hash function. XML data content integrity is ensured using an iterative hash process, structure integrity is protected by hashing an absolute path string from root node, and context referential integrity is ensured by protecting context-related elements. Presented XML data integrity model can satisfy integrity requirements under situation of fine-grained security, and compatible with XML signature. Through evaluation, the integrity model presented has a higher efficiency on digest value-generation than the Merkle hash tree-based integrity model for XML data.
|Uncontrolled Keywords:||Fine-grained security, XML data integrity, Digest value, Merkle hash tree, XML signature|
|Themes:||Media, Digital Technology and the Creative Economy|
|Schools:||Colleges and Schools > College of Science & Technology|
Strategic Leadership Team
|Journal or Publication Title:||International Journal of Computer Science and Information Security|
|Publisher:||International Journal of Computer Science and Information Security|
|Depositing User:||Users 29196 not found.|
|Date Deposited:||14 Aug 2012 14:07|
|Last Modified:||20 Aug 2013 18:30|
Actions (login required)
|Edit record (repository staff only)|