Trusted services broker for web page fine-grained security labeling

作者: Gary L. Luckenbaugh , Forrest E. Stoakes

DOI:

关键词: World Wide WebHypertextCredentialComputer scienceSession (computer science)Mandatory access controlUser interfacePasswordSecurity policyWeb page

摘要: Arbitrarily fine-grained limitation of access to information stored in a resource data processor network is provided manner compatible with existing browsers by mapping user identity and credentials randomly assigned security cookie which thus serves as surrogate credential accompanying each request during session. Labels are imbedded within HTML files/text may embody any desired policy, including mandatory control (MAC) arrangements not available through native browser functions. Data retrieved response includes from location the directly accessible use URL; being configuration file hidden users. The then filtered accordance labels for page and/or embedded text used build include hypertext links or other interfaces transmission user. Provision made viewing changing labels, passwords.