EXTENSIBLE MARKUP LANGUAGE DOCUMENT MANAGEMENT METHOD AND SYSTEM

• US 20080104124A1
• Filed: 01/04/2008
• Published: 05/01/2008
• Est. Priority Date: 02/10/2006
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: ZHAO, Yang, TIAN, Linyi, SONG, Xuefei, PENG, Chenghui, SUN, Qian, BAO, Hongqing
• Granted Patent: US 8,812,696 B2
• Time in Patent Office: Days
• US Class Current: 707/104.1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 41/0266 using meta-data, objects or commands for formatting management information, e.g. using eXtensible markup language [XML]
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

An Extensible Markup Language (XML) document management method includes: receiving an XML document management operation request sent via an XCAP protocol, by an XML Document Management Server (XDMS); determining that the XML document management operation request is in an entrustment mode, and determining whether to perform an operation described in the XML document management operation request in accordance with access permission information corresponding to an XML document, by the XDMS.

Claims

1. An Extensible Markup Language (XML) document management method, comprising:

receiving an XML document management operation request sent via an XCAP protocol, by an XML Document Management Server (XDMS);

determining that the XML document management operation request is in an entrustment mode, and determining whether to perform an operation described in the XML document management operation request in accordance with access permission information corresponding to an XML document, by the XDMS.

2. The method according to claim 1, wherein the process of determining that the XML document management operation request is in an entrustment mode comprises:

obtaining an identity identifier of an XML Document Management Client (XDMC) sending the XML document management operation request and the identity identifier of the owner of the XML document, in accordance with the XML document management operation request, by the XDMS;

determining that the identity identifier of the XDMC sending the XML document management operation request does not match the identity identifier of the owner of the XML document, by the XDMS.

3. The method according to claim 2, wherein the process of obtaining, by the XDMS, the identity identifier of the XDMC sending the XML document management operation request in accordance with the XML document management operation request comprises:

obtaining the identity identifier of the XDMC from X-3GPP-Asserted-Identity or X-3GPP-Intended-Identity in the XML document management operation request in a 3GPP IMS network provided with a GAA mechanism, by the XDMS;

otherwise obtaining the identity identifier of the XDMC from the X-XCAP-Asserted-Identity in the XML document management operation request.

4. The method according to claim 1, wherein the XML document management operation request carries an entrustment identifier, and the process of determining of that the XML document management operation request is in an entrustment mode comprises:

determining that the XML document management operation request is in an entrustment mode in accordance with the entrustment identifier, by the XDMS.

5. The method according to claim 2, wherein the access permission information comprises an identity identifier, an action field and an operation type field;

and the process of determining whether to perform an operation described in the XML document management operation request in accordance with access permission information corresponding to an XML document comprises;

determining whether to perform the operation requested by the XDMC in accordance with the action field and the operation type field corresponding to the identity identifier of the XDMC sending the XML document management operation request, wherein the action field and the operation type field are obtained from the access permission information.

6. The method according to claim 5, wherein the action field corresponding to each identity identifier in the access permission information comprises at least one of allowing, denial and required confirmation;

the operation type field corresponding to each identity identifier comprises at least one of;

a read operation, a creation operation, a modification operation, a deletion operation, a search operation, a suspense operation, a recovery operation and a subscription operation.

7. The method according to claim 5, wherein the access permission information further comprises information specifying a specific part of the XML document on which the operation is permitted;

the method further comprises;

performing the operation on the specific part of the XML document corresponding to the XML document management operation request in accordance with the information specifying a specific part of the XML document on which the operation is permitted, by the XDMS, wherein the specific management operation on the XML document comprises at least one of;

a read operation of HTTP GET, a write operation of HTTP PUT, a deletion operation of HTTP DELETE, and a search operation of HTTP POST.

8. The method according to claim 7, wherein the specific part of the XML document is represented with an XPATH expression.

9. The method according to claim 1, further comprising:

setting the access permission information corresponding to the XML document on the XDMS via the XCAP protocol in advance, by the XDMC.

10. An Extensible Markup Language (XML) document management method, comprising

receiving an XML document management operation request sent via XCAP protocol, by an XML Document Management Server (XDMS);

checking whether an identity identifier of the XDMC matches an identity identifier of an owner of a document on which an operation is requested, by the XDMS;

performing, by the XDMS, the operation requested by the XDMC;

otherwise authenticating, by the XDMS, in accordance with access permission information corresponding to the XML document to determine whether to perform the operation requested by the XDMC, if the identity identifier of the XDMC matches the identity identifier of the owner of the document on which the operation is requested.

11. The method according to claim 10, wherein the identity identifier of the XDMC is obtained by the XDMS from the request message sent from the XDMC.

12. The method according to claim 10, wherein:

the identity identifier of the XDMC is obtained by the XDMS from X-3GPP-Asserted-Identity or X-3GPP-Intended-Identity in the XML document management operation request in a 3GPP IMS network provided with a GAA mechanism;

otherwise the identity identifier of the XDMC is obtained by the XDMS from the X-XCAP-Asserted-Identity in the XML document management operation request.

13. An XML document management system, comprising:

an XML document management operation entrustment checking element, adapted to validate whether an XML document operation requested by the XML Document Management Client is in an authorized entrustment mode;

a processing element, adapted to perform a specific management operation on an XML document in accordance with an entrustment authorization rule if the XML document operation is in an authorized entrustment mode.

14. The system according to claim 13, further comprising:

an XML document management server, adapted to determine whether a specified entity is provided with a privilege of performing an XDM operation on the XML document in accordance with access permission information of the XML document whose access permission information is set in the system.

15. The system according to claim 14, wherein the XDMS authenticates an operation request sent from an XDMC other than the owner of the XML document in accordance with the access permission information of the XML document and determines whether to perform the operation requested by the XDMC.

16. The system according to claim 13, wherein the XML document management operation entrustment checking element and the processing element are provided in the XDMS, and the function of validating whether an XML document operation requested by the XML Document Management Client is in an authorized entrustment mode includes:

checking whether the identity identifier of the XDMC sending an XML document management operation request is the owner of the document on which the operation is requested, and determining whether the requested XML document operation is in an authorized entrustment mode; and

determining whether the operation request has been authorized in accordance with access permission information of a target document.

17. An XML document management server, comprising:

a checking element, adapted to check whether an XML document management operation requested by an XML Document Management Client is in an entrustment mode;

a processing element, adapted to perform a specific management operation on an XML document in accordance with an entrustment authorization rule if the checking element determines an authorization entrustment mode.

18. An XML document management method, comprising:

receiving, by an XML Document Management Server XDMS, a management operation request, which is sent from an XML Document Management Client (XDMC), for an XML document or a specific part thereof;

obtaining, by the XDMS, the identity identifier of the XDMC from the management operation request, and determining whether to perform the operation requested by the XDMC corresponding to the identity identifier in accordance with access permission information corresponding to the XML document.

19. The method according to claim 18, wherein the access permission information comprises an identity identifier of an XML document access client, an action field and an operation type field;

and the process of determining whether to perform the operation requested by the XDMC corresponding to the identity identifier in accordance with access permission information corresponding to the XML document comprises;

obtaining the action field and the operation type field corresponding to the identity identifier of the XDMC sending the operation request, and determining to perform the operation requested by the XDMC corresponding the identity identifier in accordance with the action field and the operation type field.

20. The method according to claim 19, wherein the process of obtaining an identity identifier of the XDMC from the management operation request comprises:

obtaining the identity identifier of the XDMC from X-3GPP-Asserted-Identity or X-3GPP-Intended-Identity in the request message in a 3GPP IMS network provided with a GAA mechanism;

or

obtaining the identity identifier of the XDMC from X-XCAP-Asserted-Identity in the request message.