Abstract: According to committed XPath Expression (XPE) by users, an XPE access controlling method was presented by using XACT technique. A briefly authorized auto-XPE was directly obtained in XACT, which enhances safety requirements of querying XML document message. Compared with the DOM tree searching method, the XPE access controlling method can greatly decrease the number of the nodes which are accessed by XML document, and promote the authorized searching efficiency of XML document.

Key words: Extensible markup language, XPath expression, Safety

摘要： 根据用户提交的查询路径表达式XPE，提出利用XACT（XML访问控制树）来简化查询路径表达式XPE一种方法。方法在XACT中直接获取一个简洁的受权查询路径表达式auto_XPE，加强了对XML文档信息查询的安全性要求；与用DOM树标识查询方法相比，其优点是极大地减少了实际访问XML文档树中的节点数，从而提高了对XML文档的授权查询效率。

关键词: XML, XPE, 安全