Extensible markup language document management method and system

• US 8,812,696 B2
• Filed: 01/04/2008
• Issued: 08/19/2014
• Est. Priority Date: 02/10/2006
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Bao, Hongqing, Zhao, Yang, Tian, Linyi, Sun, Qian, Song, Xuefei, Peng, Chenghui
• Primary Examiner(s): SERRAO, RANODHI N
• Application Number:
  US11/969,603
• Publication Number:
  US 20080104124A1
• Time in Patent Office: 2,419 Days
• Field of Search: 709/229, 715/234, 726/21
• US Class Current: 709/229
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2119 Authenticating web pages, e.g. with suspicious links
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 41/0266 using meta-data, objects or commands for formatting management information, e.g. using eXtensible markup language [XML]
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

An Extensible Markup Language (XML) document management method includes: receiving an XML document management operation request sent via an XCAP protocol, by an XML Document Management Server (XDMS); determining that the XML document management operation request is in an entrustment mode, and determining whether to perform an operation described in the XML document management operation request in accordance with access permission information corresponding to an XML document, by the XDMS.

Claims

1. An Extensible Markup Language (XML) document management method, comprising:

receiving an XML document management operation request sent via an XML Configuration Access Protocol (XCAP) protocol, by an XML Document Management Server (XDMS);

determining that the XML document management operation request is in an entrustment mode, by the XDMS, the entrustment mode allowing a client to entrust its management operation on an XML document to another client; and

determining whether to perform an operation described in the XML document management operation request in accordance with access permission information corresponding to an XML document, by the XDMS, wherein the access permission information is stored in an XML document of the XDMS;

wherein the process of determining that the XML document management operation request is in the entrustment mode comprises;

obtaining an identity identifier of an XML Document Management Client (XDMC) sending the XML document management operation request and the identity identifier of the owner of the XML document, in accordance with the XML document management operation request, by the XDMS;

determining that the identity identifier of the XDMC sending the XML document management operation request does not match the identity identifier of the owner of the XML document, by the XDMS.

2. The method according to claim 1, wherein the process of obtaining, by the XDMS, the identity identifier of the XDMC sending the XML document management operation request in accordance with the XML document management operation request comprises:

obtaining the identity identifier of the XDMC from X-3GPP-Asserted-Identity or X-3GPP-Intended-Identity in the XML document management operation request in a 3GPP IMS network provided with a GAA mechanism, by the XDMS;

otherwise obtaining the identity identifier of the XDMC from the X-XCAP-Asserted-Identity in the XML document management operation request.

3. The method according to claim 1, wherein the access permission information comprises an identity identifier, an action field and an operation type field;

and the process of determining whether to perform an operation described in the XML document management operation request in accordance with access permission information corresponding to an XML document comprises;

determining whether to perform the operation requested by the XDMC in accordance with the action field and the operation type field corresponding to the identity identifier of the XDMC sending the XML document management operation request, wherein the action field and the operation type field are obtained from the access permission information.

4. The method according to claim 3, wherein the action field corresponding to each identity identifier in the access permission information comprises at least one of allowing, denial and required confirmation;

the operation type field corresponding to each identity identifier comprises at least one of;

a read operation, a creation operation, a modification operation, a deletion operation, a search operation, a suspense operation, a recovery operation and a subscription operation.

5. The method according to claim 3, wherein the access permission information further comprises information specifying a specific part of the XML document on which the operation is permitted;

the method further comprises;

performing the operation on the specific part of the XML document corresponding to the XML document management operation request in accordance with the information specifying a specific part of the XML document on which the operation is permitted, by the XDMS, wherein the specific management operation on the XML document comprises at least one of;

a read operation of HTTP GET, a write operation of HTTP PUT, a deletion operation of HTTP DELETE, and a search operation of HTTP POST.

6. The method according to claim 5, wherein the specific part of the XML document is represented with an XPATH expression.

7. The method according to claim 1, wherein the XML document management operation request carries an entrustment identifier, and the process of determining of that the XML document management operation request is in an entrustment mode comprises:

determining that the XML document management operation request is in an entrustment mode in accordance with the entrustment identifier, by the XDMS.

8. The method according to claim 1, further comprising:

setting the access permission information corresponding to the XML document on the XDMS via the XCAP protocol in advance, by the XDMC.

9. An Extensible Markup Language (XML) document management system, comprising:

an XML document management operation entrustment checking element, adapted to receive an XML document management operation request sent via an XML Configuration Access Protocol (XCAP) protocol, and determine that the XML document management operation request is in an entrustment mode, the entrustment mode allowing a client to entrust its management operation on an XML document to another client;

a processing element, adapted to perform an operation described in the XML document management operation request in accordance with access permission information corresponding to an XML document, wherein the access permission information is stored in an XML document of the XDMS;

wherein the process of determining that the XML document management operation request is in the entrustment mode comprises;

obtaining an identity identifier of an XML Document Management Client (XDMC) sending the XML document management operation request and the identity identifier of the owner of the XML document, in accordance with the XML document management operation request, by the XDMS;

determining that the identity identifier of the XDMC sending the XML document management operation request does not match the identity identifier of the owner of the XML document, by the XDMS;

wherein the XML document management operation entrustment checking element and the processing element include a transmitter to transmit messages and a receiver to receive messages.

10. The system according to claim 9, further comprising:

an XML document management server, adapted to determine whether a specified entity is provided with a privilege of performing an XDM operation on the XML document in accordance with access permission information of the XML document whose access permission information is set in the system.

11. The system according to claim 10, wherein the XDMS authenticates an operation request sent from an XDMC other than the owner of the XML document in accordance with the access permission information of the XML document and determines whether to perform the operation requested by the XDMC.

12. The system according to claim 9, wherein the XML document management operation entrustment checking element and the processing element are provided in the XDMS, and the function of validating whether an XML document operation requested by the XML Document Management Client is in an authorized entrustment mode includes:

checking whether the identity identifier of the XDMC sending an XML document management operation request is the owner of the document on which the operation is requested, and determining whether the requested XML document operation is in an authorized entrustment mode; and

determining whether the operation request has been authorized in accordance with access permission information of a target document.

13. An Extensible Markup Language (XML) document management server, comprising:

a checking element, adapted to receive an XML document management operation request sent via an XML Configuration Access Protocol (XCA)1 protocol, and determine that the XML document management operation request is in an entrustment mode, the entrustment mode allowing a client to entrust its management operation on an XML document to another client, whereinthe process of determining that the XML document management operation request is in the entrustment mode comprises;

obtaining an identity identifier of an XML Document Management Client XDMC sending the XML document management operation request and the identity identifier of the owner of the XML document, in accordance with the XML document management operation request, by the XDMS;

determining that the identity identifier of the XDMC sending the XML document management operation request does not match the identity identifier of the owner of the XML document by the XDMS;

a processing element, adapted to perform an operation described in the XML document management operation request in accordance with access permission information corresponding to an XML document, wherein the access permission information is stored in an XML document of the XDMS;

wherein the checking element and the processing element include a transmitter to transmit messages and a receiver to receive message.