XML data integrity based on concatenated hash function

Liu, B; Lu, J; Yip, YJ

Abstract

Data integrity is the fundamental for data authentication. A major problem for XML data authentication is that signed XML data can be copied to another document but still keep signature valid. This is caused by XML data integrity protecting. Through investigation, the paper discovered that besides data content integrity, XML data integrity should also protect element location information, and context referential integrity under fine-grained security situation. The aim of this paper is to propose a model for XML data integrity considering XML data features. The paper presents an XML data integrity model named as CSR (content integrity, structure integrity, context referential integrity) based on a concatenated hash function. XML data content integrity is ensured using an iterative hash process, structure integrity is protected by hashing an absolute path string from root node, and context referential integrity is ensured by protecting context-related elements. Presented XML data integrity model can satisfy integrity requirements under situation of fine-grained security, and compatible with XML signature. Through evaluation, the integrity model presented has a higher efficiency on digest value-generation than the Merkle hash tree-based integrity model for XML data.

Citation

Liu, B., Lu, J., & Yip, Y. (2009). XML data integrity based on concatenated hash function. International journal of computer science and information security (Pittsburgh, Pa.), 1(1), 31-40

• Journal Article Type: Article
• Publication Date: May 1, 2009
• Deposit Date: Aug 14, 2012
• Publicly Available Date: Apr 5, 2016
• Journal: International Journal of Computer Science and Information Security
• Peer Reviewed: Peer Reviewed
• Volume: 1
• Issue: 1
• Pages: 31-40
• Keywords: Fine-grained security, XML data integrity, Digest value, Merkle hash tree, XML signature
• Publisher URL: http://sites.google.com/site/ijcsis/special-issue-may2009