DOCSLIB.ORG

Developing Filtering Techniques for Securing Vector Graphics Images Applied to Ubiquitous Patient Records

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Developing Filtering Techniques for Securing Vector Graphics Images Applied to Ubiquitous Patient Records Proceedings of the 5th WSEAS International Conference on Telecommunications and Informatics, Istanbul, Turkey, May 27-29, 2006 (pp139-144) Developing Filtering Techniques for Securing Vector Graphics Images Applied to Ubiquitous Patient Records Dr. Sabah MOHAMMED, Dr. Jinan FIAIDHI and Ahmed Sabbir ARIF Department of Computer Science, Lakehead University, 955 Oliver Road, Thunder Bay, Ontario P7B 5E1, Canada http://flash.lakeheadu.ca/~mohammed http://flash.lakeheadu.ca/~jfiaidhi Abstract- In this article we are describing the security challenges with the use of SVG Vector Graphics for ubiquitous patient records. Moreover, we are presenting an architecture that incorporates security mediators in the form of SVG filers to provide a highly flexible approach for accessing Electronic Patient Records. The SVG filters are based on the SAX primitives to pushes pieces of the SVG to the encryption/decryption handlers. The SAX handlers can filter, skip tags, or encrypt tags partially or universally at any time from the stream of the SVG. The SVG encryption/decryption techniques used by the SAX filters implements the standard specification of the W3C XML Encryption. Key-Words- Vector Graphics Images, SVG, Ubiquitous Patient Records, SAX Filters, XML Encryption. 1. INTRODUCTION (http://www.patienttracker.com/products.htm), Healthcare today is moving away from the tethered DICOMX (http://142.104.48.20/Benjamin.Jung/), domain and becoming diffused into an environment Wireless MediCenter rich with ubiquitous and portable digital devices. In this (http://www.wirelessmedicenter.com/mc/glance.cfm) evolving environment, the need to deliver information the m-care (http://www.m-care.co.uk/tech.html) such as Electronic Patient Records (EPR) at the point – PatientKeeper of – care is a prime factor in managing the healthcare (http://www.patientkeeper.com/products.html) and system efficiently. This however presents serious PocketMD (http://www.pocketmd.com). Furthermore, security challenges in ubiquitous environments where motivations such as patient privacy protection and protecting the confidentiality of the information, while recent laws like the US Health Insurance Portability and at the same time allowing authorized user to access it Accountability Act (HIPAA), the US President conveniently is the core issue in the paradigm. Executive Order (13335 of April 2004) on the However, ubiquitous computing based on XML has the migration to EPR, and the Canada Health Act make potential to improve many workflows in Health Care. security a fundamental concern within the healthcare In particular, XML promises a means of providing industry. flexible, incremental employment of electronic systems, and also provides a means for easy communication Indeed, the use of XML is not limited for the between disparate binary electronic systems. Ultimately representation of textual documents, but it can also be and ideally the whole healthcare record system will be used to represent each document in the processing of based on a non-proprietary mark-up language (XML), medical tests and imaging. Once an application is built but till that day comes we need to develop effective on XML such as a patient record standard, then a wide XML security that can work within variety of range of other XML standards can be brought to bear environments. In this direction, several organizations such as using XML parsing based on DOM or SAX have produced standards for XML security and XML models, or even as to represent and process graphical patient records. The most visible of these are the Health images/multimedia using the W3C SVG vector Level 7 (http://www.hl7.org/), the W3C XML graphics standard. Our objective in this article is to Encryption and Signature (www.w3c.org), EHRcom achieve secure sharing and accessing of (http://www.centc251.org/), OpenEHR image/multimedia medical information on the Internet (http://www.openehr.org/), MedBiquitous or on ubiquitous devices while avoiding violations of (http://www.medbiq.org/), HandHeldMed security or privacy. In this direction we are Proceedings of the 5th WSEAS International Conference on Telecommunications and Informatics, Istanbul, Turkey, May 27-29, 2006 (pp139-144) investigating, developing, and testing filtering “blocked” effect and colors are too much different from capabilities to complement other means of controlling the original image [5]. Triangulation on the other hand release of SVG medical documents to individuals and requires a highly expensive iterative algorithm that organizations outside of the direct health-care delivery segments the vector image according to complicated setting. Our specific focus is on the use of effective wavelet transformation which is applied to a Fourier- SVG filtering of the information contained in images transformed representation of the image [6]. that are part of an electronic medical record. In this article we are concerned with SVG However, since SVG graphics is in the end image filters which transform securely an SVG image just text (excluding the cases of embedded raster in a predictable fashion by recognizing the SVG graphics), the source is "open." This raises potential structure. For this purpose, our image filters replies on security-related concerns in form of copyright utilizing a SAX parsing algorithm along with an infringement and misuse. Although these issues already implementation to the W3C XML Encryption policy. exist with other text-based formats on the Web (e.g. HTML, CSS, XML and JavaScript), there is a dire need for a different solution; that take into account the nature 2. The W3C SVG Visual Filters: of the vector graphics. A possible direct solution can be Visual filters are a familiar concept if you've ever used based on the use a compression mechanism that graphics programs: You take a raw image and tell your converts vector graphics into binary with an program to put a little blur on it, or you might reverse "encryption" to increase its security. The problem with some of the image itself. In this direction W3C [7] this approach is that it is contrary to the advantage of recommended certain SVG filters which consist of a including metadata information in SVG, if the markup series of graphics operations that are applied to a given is "scrambled" in any way. Even if the metadata source graphic to produce a modified graphical result. information can be extracted, the authoring and The result of the filter effect is rendered to the target rendering (not to mention searching) software are device instead of the original source graphic. Filter imposed with the additional burden of supporting that effects are defined by 'filter' elements. To apply a filter compression mechanism. Even the use of a effect to a graphics element or a container element, you compression scheme like XMLZip or XMill which set the value of the 'filter' property on the given element leaves the metadata information intact has very little such that it references the filter effect. Each 'filter' success [1]. The other fine solution is to keep the SVG element contains a set of filter primitives as its children. structure intact and try to filter in and out information Each filter primitive performs a single fundamental that need to be secured only. In this direction there are graphical operation (e.g. blur) on one or more inputs, two main approaches. One approach which uses an producing a graphical result. Because most of the filter access control map to allow only authorized accesses to primitives represent some form of image processing, in particular parts of the vector graphics [2]. most cases the output from a filter primitive is a single Unfortunately, controlling access requires a perfect RGBA image. When applied to container elements such organization of the internal data in an enterprise. In as 'g', the 'filter' property applies to the contents of the many practical cases this requirement cannot be group as a whole. Typically, the graphics commands fulfilled, since it implies a radical restructuring of all are executed as part of the processing of the referenced internal information services. The cost of aligning all 'filter' element via use of the keywords SourceGraphic internal data to deal with external access privileges is or SourceAlpha. Filter effects can be applied to not only costly from the systems point-of-view, but also container elements with no content (e.g., an empty 'g' for all internal users of information systems, who now element), in which case the SourceGraphic or must file all data according to external requirements SourceAlpha consist of a transparent black rectangle that are normally none of their concern. The second that is the size of the filter effects region.SVG Filter approach is more comprehensive and relies on filtering primitives such as 'feGaussianBlur', 'feOffset', the graphical features of the vector graphic which are in 'feSpecularLighting', 'feComposite', 'feMerge', ' the form of contours (i.e. SVG paths) and try to feTurbulence ', 'feConvolveMatrix', 'feDiffuseLighting', approximate it for compression and security purposes. 'feDisplacementMap', 'feFlood', 'feImage', In this direction, researchers either use direct 'feMorphology', and 'feTile' takes input SourceAlpha, approximations based on and cubic bezier, and elliptical which is the alpha channel of the source graphic. The curves [3] for compression purposes only or use result is stored in a temporary buffer which then can be triangulation techniques based on filtering in the used by another SVG filter primitive
Load more

Recommended publications
  • XML Signature/Encryption — the Basis of Web Services Security
    Special Issue on Security for Network Society Falsification Prevention and Protection Technologies and Products XML Signature/Encryption — the Basis of Web Services Security By Koji MIYAUCHI* XML is spreading quickly as a format for electronic documents and messages. As a consequence, ABSTRACT greater importance is being placed on the XML security technology. Against this background research and development efforts into XML security are being energetically pursued. This paper discusses the W3C XML Signature and XML Encryption specifications, which represent the fundamental technology of XML security, as well as other related technologies originally developed by NEC. KEYWORDS XML security, XML signature, XML encryption, Distributed signature, Web services security 1. INTRODUCTION 2. XML SIGNATURE XML is an extendible markup language, the speci- 2.1 Overview fication of which has been established by the W3C XML Signature is an electronic signature technol- (WWW Consortium). It is spreading quickly because ogy that is optimized for XML data. The practical of its flexibility and its platform-independent technol- benefits of this technology include Partial Signature, ogy, which freely allows authors to decide on docu- which allows an electronic signature to be written on ment structures. Various XML-based standard for- specific tags contained in XML data, and Multiple mats have been developed including: ebXML and Signature, which enables multiple electronic signa- RosettaNet, which are standard specifications for e- tures to be written. The use of XML Signature can commerce transactions, TravelXML, which is an EDI solve security problems, including falsification, spoof- (Electronic Data Interchange) standard for travel ing, and repudiation. agencies, and NewsML, which is a standard specifica- tion for new distribution formats.
    [Show full text]
  • XML for Java Developers G22.3033-002 Course Roadmap
    XML for Java Developers G22.3033-002 Session 1 - Main Theme Markup Language Technologies (Part I) Dr. Jean-Claude Franchitti New York University Computer Science Department Courant Institute of Mathematical Sciences 1 Course Roadmap Consider the Spectrum of Applications Architectures Distributed vs. Decentralized Apps + Thick vs. Thin Clients J2EE for eCommerce vs. J2EE/Web Services, JXTA, etc. Learn Specific XML/Java “Patterns” Used for Data/Content Presentation, Data Exchange, and Application Configuration Cover XML/Java Technologies According to their Use in the Various Phases of the Application Development Lifecycle (i.e., Discovery, Design, Development, Deployment, Administration) e.g., Modeling, Configuration Management, Processing, Rendering, Querying, Secure Messaging, etc. Develop XML Applications as Assemblies of Reusable XML- Based Services (Applications of XML + Java Applications) 2 1 Agenda XML Generics Course Logistics, Structure and Objectives History of Meta-Markup Languages XML Applications: Markup Languages XML Information Modeling Applications XML-Based Architectures XML and Java XML Development Tools Summary Class Project Readings Assignment #1a 3 Part I Introduction 4 2 XML Generics XML means eXtensible Markup Language XML expresses the structure of information (i.e., document content) separately from its presentation XSL style sheets are used to convert documents to a presentation format that can be processed by a target presentation device (e.g., HTML in the case of legacy browsers) Need a
    [Show full text]
  • Introduction to XML
    Introduction to XML CS 317/387 Agenda – Introduction to XML 1. What is it? 2. What’s it good for? 3. How does it work? 4. The infrastructure of XML 5. Using XML on the Web 6. Implementation issues & costs 2 1. What is it? Discussion points: First principles: OHCO Example: A simple XML fragment Compare/contrast: SGML, HTML, XHTML A different XML for every community Terminology 3 1 Ordered hierarchies of content objects Premise: A text is the sum of its component parts A <Book> could be defined as containing: <FrontMatter>, <Chapter>s, <BackMatter> <FrontMatter> could contain: <BookTitle> <Author>s <PubInfo> A <Chapter> could contain: <ChapterTitle> <Paragraph>s A <Paragraph> could contain: <Sentence>s or <Table>s or <Figure>s … Components chosen should reflect anticipated use 4 Ordered hierarchies of content objects OHCO is a useful, albeit imperfect, model Exposes an object’s intellectual structure Supports reuse & abstraction of components Better than a bit-mapped page image Better than a model of text as a stream of characters plus formatting instructions Data management system for document-like objects Does not allow overlapping content objects Incomplete; requires infrastructure 5 Content objects in a book Book FrontMatter BookTitle Author(s) PubInfo Chapter(s) ChapterTitle Paragraph(s) BackMatter References Index 6 2 Content objects in a catalog card Card CallNumber MainEntry TitleStatement TitleProper StatementOfResponsibility Imprint SummaryNote AddedEntrySubject(s) Added EntryPersonalName(s) 7 Semistructured Data Another data model, based on trees. Motivation: flexible representation of data. Often, data comes from multiple sources with differences in notation, meaning, etc. Motivation: sharing of documents among systems and databases.
    [Show full text]
  • Web API Protocol and Security Analysis Web
    EXAMENSARBETE INOM DATATEKNIK, GRUNDNIVÅ, 15 HP STOCKHOLM, SVERIGE 2017 Web API protocol and security analysis Web API protokoll- och säkerhetsanalys CRISTIAN ARAYA MANJINDER SINGH KTH SKOLAN FÖR TEKNIK OCH HÄLSA Web API protocol and security analysis Web API protokoll- och säkerhetsanalys Cristian Araya and Manjinder Singh Degree project in Computer science First level, 15hp Supervisor from KTH: Reine Bergström Examiner: Ibrahim Orhan TRITA-STH 2017:34 KTH The School of Technology and Health 141 52 Flemingsberg, Sweden Abstract There is problem that every company has its own customer portal. This problem can be solved by creating a platform that gathers all customers’ portals in one place. For such platform, it is required a web API protocol that is fast, secure and has capacity for many users. Consequently, a survey of various web API protocols has been made by testing their performance and security. The task was to find out which web API protocol offered high security as well as high performance in terms of response time both at low and high load. This included an investigation of previous work to find out if certain protocols could be ruled out. During the work, the platform’s backend was also developed, which needed to implement chosen web API protocols that would later be tested. The performed tests measured the APIs’ connection time and their response time with and without load. The results were analyzed and showed that the protocols had both pros and cons. Finally, a protocol was chosen that was suitable for the platform because it offered high security and fast connection.
    [Show full text]
  • TU07 XML at The
    ApacheCon 2004 November 2004 XML at the ASF Ted Leung [email protected] Copyright © Sauria Associates, LLC 2004 1 ApacheCon 2004 November 2004 Overview xml.apache.org ws.apache.org Xerces XML-RPC Xalan Axis FOP WSIF Batik JaxMe Xindice cocoon.apache.org Forrest XML-Security Cocoon XML-Commons Lenya XMLBeans Copyright © Sauria Associates, LLC ApacheCon 2004 2 There are three major XML focused projects at the ASF. Originally there was one project, xml.apache.org. Earlier this year, the Cocoon and web services projects were formed. Xml.apache.org contains a number of projects that are general purpose XML tools. Most of these tools are based on specifications from the World Wide Web Consortium. This includes XML itself, XSLT, XSL Formatting object, Scalable Vector Graphics, and XML Signature and XML Encryption The web services project, ws.apache.org contains projects that cluster around standards for dealing with Web Services, including SOAP and XML-RPC The Cocoon project is oriented around the Cocoon Web publishing framework which is basd on XML, XSLT, and a number of other XML related technologies. I’m not going to be able to give you any deep technical details regarding all of these projects. Instead, I’m going to try to describe what these projects are, what standards they implement, and talk about situations where you might use them. Unless I say otherwise, I’m going to be covering the Java projects. There are a few projects which have C/C++ versions and I’ll mention that where applicable. Copyright © Sauria Associates,
    [Show full text]
  • The OWASP Foundation OWASP XML External Entity Attacks (XXE)
    AppSec Germany 2010 XML External Entity Attacks (XXE) Sascha Herzog Compass Security AG [email protected] OWASP +41 55 214 41 78 20.10.2010 Copyright © The OWASP Foundation Permission is granted to copy, distribute and/or modify this document under the terms of the OWASP License. The OWASP Foundation http://www.owasp.org XML External Entity Attacks (XXE), Sacha Herzog AppSec Germany 2010 Agenda Introduction Server2Server Communication – Web Services Client2Server Communication – Web 2.0 (AJAX) XML Basics DTD XML Schema XML Attacks Generator Attacks XML Parser Attacks Mitigation Xerces Hardening OWASP OWASP AppSec Germany 2010 Conference XML External Entity Attacks (XXE), Sacha Herzog AppSec Germany 2010 B2B / Server2Server XML Data Exchange in Web Services B2B integration with XML documents SOAP Services ORDER XML Shop Internet Supplier CONFIRM XML Example Order processing systems OWASP OWASP AppSec Germany 2010 Conference XML External Entity Attacks (XXE), Sacha Herzog AppSec Germany 2010 B2B / Server2Server Example: Web Service Integration of Web Services into portal (Stock Quotes) Data or presentation oriented Remote Portlets can be distinguished. OWASP OWASP AppSec Germany 2010 Conference XML External Entity Attacks (XXE), Sacha Herzog AppSec Germany 2010 XMLHttpRequest / Client2Server XML Data Exchange XMLHttpRequest Object JavaScript OWASP OWASP AppSec Germany 2010 Conference XML External Entity Attacks (XXE), Sacha Herzog AppSec Germany 2010 Web 2.0 - Data Exchange Formats Upstream Data Format Web 2.0 GET & POST(form, txt/xml, soap-xml) Downstream Data Format Web 2.0 html,css,xml,java-script,json,custom OWASP OWASP AppSec Germany 2010 Conference XML External Entity Attacks (XXE), Sacha Herzog AppSec Germany 2010 XML Basics: Introduction XML is a standard for exchanging structured data in textual format <?xml version="1.0" encoding="UTF-8"?> <order> <product>1234</product> <count>1</count> <orderer> <contact>Jan P.
    [Show full text]
  • Securely Streaming SVG Web-Based Electronic Healthcare Records Involving Android Mobile Clients
    146 JOURNAL OF EMERGING TECHNOLOGIES IN WEB INTELLIGENCE, VOL. 1, NO. 2, NOVEMBER 2009 Securely Streaming SVG Web-Based Electronic Healthcare Records involving Android Mobile Clients Sabah Mohammed and Jinan Fiaidhi Department of Computer Science, Lakehead University, Thunder Bay, Ontario P7B 5E1, Canada {mohammed, jfiaidhi}@lakeheadu.ca Osama Mohammed Department of Software Engineering, Lakehead University, Thunder Bay, Ontario P7B 5E1, Canada [email protected] Abstract— Although Electronic Healthcare Records (EHRs) system to provide it in a paper fashion. Healthcare has technology largely facilitates patient care by providing long relied upon paper based record systems which have clinicians with the ability to review a more complete medical become cumbersome and expensive to manage and record, interoperability and privacy issues present present significant challenges related to speed of significant barriers to their implementation. This article accessibility and security. Thus the emerging benefit of proposes the open source SVG (Scalable Vector Graphics) standard for representing electronic healthcare records for mobile Internet technology to healthcare is to provide interoperability purpose where security can be enforced mobile access to medical records. Again, using mobile using lightweight SAX streaming filters. The SVG filters are technology means that the treatment process can be sped based on the Java SAX API to push pieces of the SVG to the up and the potential for medical errors can be reduced. encryption/decryption handlers. The SAX handlers can With motivations such as patient privacy protection and filter, skip tags, or encrypt tags partially or universally at laws like the US Health Insurance Portability and any time from the stream of the SVG EHRs.
    [Show full text]
  • Guide to XML Web Services Security (PDF)
    Guide to XML Web Services Security XML Application Firewalls for Securing and Monitoring XML Web Services XML Web Services Are Revolutionizing the IT Industry XML and Web Services are simple, but powerful standards that enable applications to more efficiently communicate with each other. Similar to how Internet-based technologies enable person-to-person (email) and person-application communication (web pages), XML Web Services is revolutionizing application-to-application communication. When you send an email, you need not worry about what technologies are being used to send and receive the email. As long as various simple standards are followed, you are ensured the message will be readable by the receiving party regardless of whether they are using Outlook, Unixmail or Yahoo Mail on any platform. XML Web Services enables applications to communicate more effectively without having to work out the underlying mechanics of the communication. However, Web Services standards do not completely address security for XML Web Services. This guide provides you with a quick overview of the security issues related to XML Web Services, what standards are currently in the works and how you can secure communication today. Why are Web Services Potentially Dangerous? The use of XML and Web Services can pose serious risk if security is not properly addressed from the beginning. Current security schemes must be updated to handle the new class of communications that Web Services enables. Current technologies can be used to secure highly controlled Web Service networks but are not able to scale to mission critical environments. Web Services Expose New Security Risks Web Services are designed to tunnel through Network firewalls do not firewalls, evading their usefulness at the application provide protection layer.
    [Show full text]
  • License Information User Manual Oracle® Developer Studio 12.6
    ® License Information User Manual Oracle Developer Studio 12.6 Last Updated: JUNE 2017 Part No: E77805 June 2017 License Information User Manual Oracle Developer Studio 12.6 Part No: E77805 Copyright © 2015, 2017, Oracle and/or its affiliates. All rights reserved. This software and related documentation are provided under a license agreement containing restrictions on use and disclosure and are protected by intellectual property laws. Except as expressly permitted in your license agreement or allowed by law, you may not use, copy, reproduce, translate, broadcast, modify, license, transmit, distribute, exhibit, perform, publish, or display any part, in any form, or by any means. Reverse engineering, disassembly, or decompilation of this software, unless required by law for interoperability, is prohibited. The information contained herein is subject to change without notice and is not warranted to be error-free. If you find any errors, please report them to us in writing. If this is software or related documentation that is delivered to the U.S. Government or anyone licensing it on behalf of the U.S. Government, then the following notice is applicable: U.S. GOVERNMENT END USERS: Oracle programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, delivered to U.S. Government end users are "commercial computer software" pursuant to the applicable Federal Acquisition Regulation and agency-specific supplemental regulations. As such, use, duplication, disclosure, modification, and adaptation of the programs, including any operating system, integrated software, any programs installed on the hardware, and/or documentation, shall be subject to license terms and license restrictions applicable to the programs.
    [Show full text]
  • Exploring the XML World
    Lars Strandén SP Swedish National Testing and Research Institute develops and transfers Exploring the XML World technology for improving competitiveness and quality in industry, and for safety, conservation of resources and good environment in society as a whole. With - A survey for dependable systems Swedens widest and most sophisticated range of equipment and expertise for technical investigation, measurement, testing and certfi cation, we perform research and development in close liaison with universities, institutes of technology and international partners. SP is a EU-notifi ed body and accredited test laboratory. Our headquarters are in Borås, in the west part of Sweden. SP Swedish National Testing and Research Institute SP Swedish National Testing SP Electronics SP REPORT 2004:04 ISBN 91-7848-976-8 ISSN 0284-5172 SP Swedish National Testing and Research Institute Box 857 SE-501 15 BORÅS, SWEDEN Telephone: + 46 33 16 50 00, Telefax: +46 33 13 55 02 SP Electronics E-mail: [email protected], Internet: www.sp.se SP REPORT 2004:04 Lars Strandén Exploring the XML World - A survey for dependable systems 2 Abstract Exploring the XML World - A survey for dependable systems The report gives an overview of and an introduction to the XML world i.e. the definition of XML and how it can be applied. The content shall not be considered a development tutorial since this is better covered by books and information available on the Internet. Instead this report takes a top-down perspective and focuses on the possibilities when using XML e.g. concerning functionality, tools and supporting standards. Getting started with XML is very easy and the threshold is low.
    [Show full text]
  • Open Source Used in Cisco Intelligent Automation for Cloud 4.3
    Open Source Used In Cisco Intelligent Automation for Cloud 4.3 Cisco Systems, Inc. www.cisco.com Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on the Cisco website at www.cisco.com/go/offices. Text Part Number: 78EE117C99-96756249 Open Source Used In Cisco Intelligent Automation for Cloud 4.3 1 This document contains licenses and notices for open source software used in this product. With respect to the free/open source software listed in this document, if you have any questions or wish to receive a copy of any source code to which you may be entitled under the applicable free/open source license(s) (such as the GNU Lesser/General Public License), please contact us at [email protected]. In your requests please include the following reference number 78EE117C99-96756249 Contents 1.1 Apache Ant 1.6.5 1.1.1 Notifications 1.1.2 Available under license 1.2 Apache Commons Lib Apache 2.0 1.2.1 Available under license 1.3 Apache Commons VFS 2.2.0 1.3.1 Available under license 1.4 Apache Jakarta RegExp 1.3 1.4.1 Notifications 1.4.2 Available under license 1.5 Apache XML Commons Resolver 1.2.0 1.5.1 Available under license 1.6 bootstrap 2.3.2 1.6.1 Available under license 1.7 c3 0.4.10 1.8 Castor 0.9.5.4 1.8.1 Available under license 1.9 D3 3.5.6 1.9.1 Available under license 1.10 DOM 20001113 1.10.1 Available under license 1.11 FancyTree 2.11.0 1.11.1 Available under license 1.12 fping 2.4b2 1.12.1 Available under license 1.13 Freemarker 2.3.18 Open Source Used In Cisco Intelligent
    [Show full text]
  • XML and Applications 2014/2015 Lecture 12 – 19.01.2015 Standards for Inter-Document Relations
    Some more XML applications and XML-related standards (XLink, XPointer, XForms) Patryk Czarnik XML and Applications 2014/2015 Lecture 12 – 19.01.2015 Standards for inter-document relations XPointer – addressing documents and their fragments XInclude – logical inclusion of documents within other documents XLink – declarative relations between documents and their fragments 2 / 22 XPointer The standard defines addressing XML documents and their fragments using standard URI syntax: http://www.sejm.gov.pl/ustawa.xml#def-las 3 W3C recommendations dated 2002-2003: XPointer Framework http://www.w3.org/TR/xptr-framework/ XPointer element() Scheme http://www.w3.org/TR/xptr-element/ XPointer xmlns() Scheme http://www.w3.org/TR/xptr-xmlns/ XPointer xpointer() Scheme http://www.w3.org/TR/xptr-xpointer/ (neverending?) Working Draft 3 / 22 XPointer – xpointer scheme xpointer scheme allows to address elements using XPath: http://www.sejm.gov.pl/ustawa.xml#xpointer(/art[5]/par[2]) xmlns scheme adds namespace declarations to the above: ustawa.xml#xmlns(pr=http://www.sejm.gov.pl/prawo) xpointer(/pr:art[5]/pr:par[2]) 4 / 22 XPointer – element scheme Element carrying ID attribute with given value: document.xml#element(def-las) Element with given position (absolute or relative to element carrying ID with given value): document.xml#element(/1/4/3) document.xml#element(def-las/2/3) Short syntax: document.xml#def-las document.xml#/1/4/3 document.xml#def-las/2/3 5 / 22 XInclude Including external XML documents (or their fragments) in another XML document. Similar to entities, but: normal element markup, no special syntax, no need to declare anything in DTD, nor to have DTD at all Main capabilities: including complete documents (identified by URL) or their fragments (pointed by XPointer) including XML tree (default) or raw text defining content to be used in case of an error Supported by many parsers, including Java (JAXP).
    [Show full text]