In this work analyses the transition from UML class diagrams to XML schema. The main problems, such as - UML does not include all the features required to describe a XML schema - are explored. Also, the principles of XML schema normalization, resemblances and differences between applying normal forms to XML documents and relational data bases are presented.

XML data is often accompanied by type information, usually expressed by some schema language. Sometimes XML data can be related to ontologies defining classes of objects, such classes can also be interpreted as types. Type systems proved to be extremely useful in programming languages, for instance to automatically discover certain kinds of errors. This thesis deals with an XML query language Xcerpt, which originally has no underlying type system nor any provision for taking advantage of existing type information. We provide a type system for Xcerpt; it makes possible type inference and checking type correctness. The system is descriptive: the types associated with Xcerpt constructs are sets of data terms and approximate the semantics of the constructs. A formalism of Type Definitions is adapted to specify such sets. The formalism may be seen as a simplification and abstraction of XML schema languages. The type inference method, which is the core of this work, may be seen as abstract interpretation. A non standard way of assuring termination of fixed point computations is proposed, as standard approaches are too inefficient. The method is proved correct wrt. the formal semantics of Xcerpt. We also present a method for type checking of programs. A success of type checking implies that the program is correct wrt. its type specification. This means that the program produces results of the specified type whenever it is applied to data of the given type. On the other hand, a failure of type checking suggests that the program may be incorrect. Under certain conditions (on the program and on the type specification), the program is actually incorrect whenever the proof attempt fails. A prototype implementation of the type system has been developed and usefulness of the approach is illustrated on example programs. In addition, the thesis outlines possibility of employing semantic types (ontologies) in Xcerpt. Introducing ontology classes into Type Definitions makes possible discovering some errors related to the semantics of data queried by Xcerpt. We also extend Xcerpt with a mechanism of combining XML queries with ontology queries. The approach employs an existing Xcerpt engine and an ontology reasoner; no modifications are required.

The aim of this Thesis is implement Aplication Programming Interface (API) with support of XML native documents. First part deal with introduction of XML model and with this markup language related technologies. Alfter that the thesis describe individual XML native databases solutions and focus to issues of persistence XML data stored in relational databases, analyse mapping methods applicable to their relational model. After that the thesis describe design and implementation of the API, which afford a resources for XML documents data holding and manipulating in relational database system. The final section of this thesis is assignment to aplication tests and evaluation of results.

Le langage XML est devenu un standard de représentation et d'échange de données à travers le web. Le but de la réplication de données au sein de différents sites est de minimiser le temps d'accès à ces données partagées. Cependant, différents problèmes sont liés à la sécurisation de ces données. Le but de cette thèse est de proposer des modèles de contrôles d'accès XML qui prennent en compte les droits de lecture et de mise-à-jour et qui permettent de surmonter les limites des modèles qui existent. Nous considérons les langages XPath et XQuery Update Facility pour la formalisation des requêtes d'accès et des requêtes de mise-à-jour respectivement. Nous donnons des descriptions formelles de nos modèles de contrôles d'accès et nous présentons des algorithmes efficaces pour le renforcement des politiques de sécurité spécifiées à la base de ces modèles. L'autre partie de cette thèse est consacrée à l'étude pratique de nos propositions. Nous présentons notre système appelé SVMAX qui met en oeuvre nos solutions, et nous conduisons une étude expérimentale basée sur une DTD réelle pour montrer son efficacité. Plusieurs systèmes de bases de données natives (systèmes de BDNs) ont été proposés récemment qui permettent une manipulation efficace des données XML en utilisant la plupart des standards du W3C. Nous montrons que notre système SVMAX peut être intégré facilement et efficacement au sein d'un large ensemble de systèmes de BDNs. A nos connaissances, SVMAX est le premier système qui permet la sécurisation des données XML conformes à des DTDs arbitraires (récursives ou non) et ceci en moyennant un fragment significatif de XPath et une classe riche d'opérations de mise-à-jour XML / XML has become a standard for representation and exchange of data across the web. Replication of data within different sites is used to increase the availability of data by minimizing the access's time to the shared data. However, the safety of the shared data remains an important issue. The aim of the thesis is to propose some models of XML access control that take into account both read and update rights and that overcome limitations of existing models. We consider the XPath language and the XQuery Update Facility to formalize respectively user access queries and user update operations. We give formal descriptions of our read and update access control models and we present efficient algorithms to enforce policies that can be specified using these models. Detailed proofs are given that show the correctness of our proposals. The last part of this thesis studies the practicality of our proposals. Firstly, we present our system, called SVMAX, that implements our solutions and we conduct an extensive experimental study, based on real-life DTD, to show that it scales well. Many native XML databases systems (NXD systems) have been proposed recently that are aware of the XML data structure and provide efficient manipulation of XML data by the use of most of W3C standards. Finally, we show that our system can be integrated easily and efficiently within a large set of NXD systems, namely BaseX, Sedna and eXist-db. To the best of our knowledge, SVMAX is the first system for securing XML data in the presence of arbitrary DTDs (recursive or not), a significant fragment of XPath and a rich class of XML update operations

The term Facility Management describes one part of business management with the goal of supporting the management activities through the delivery of infrastructure, technology and services. It covers the whole life cycle of a structural facility. An integration of facility management in the active processes of an enterprise or an enterprise group will be substantially supported by the introduction of an efficient, flexible and future-safe computer aided facility management system. But still no universal standards were established in this area. With high expenditure adapted single solutions are the rule, harm however the demand for a save investment independently of proprietary special solutions of individual manufacturers. An analysis of existing business standards shows that these solutions are suitable only partly for combining the existing isolated solutions in a virtual enterprise group in order to create a sustainable architectural approach for a process oriented facility management. In doing so the communication must not be reduced to pure data exchange, but only stable interface definitions and accurately specified document formats can lead to a continuous solution. In order to make these solutions for developers and end users in the phases of the design, the implementation and maintenance equally clear, a common vocabulary of concepts is necessary. The usage of the Unified Modeling Language gives thereby a promising basis. The concrete models with the contained types and their relations to each other are described over meta models. The usage of XML as means to data exchange between the individual components and for the description of the meta models guarantees a flexible and future-safe development basis. In the context of the work based on use cases the conception for a framework with core components for process oriented facility management in distributed environments is designed. The framework Simplix conceived by the author integrates meta models for the description of concrete data, workflow and access schemes. The designed modules are embedded into a component-based architecture, in order to obtain a greatest possible flexibility for the deployment in heterogeneous IT environments. The framework Simplix covers four core components. The SchemaService describes the concrete product models, the associated processes are represented by the WorkflowService. The realization of the access rules is realized by the SecurityService. The exchange of workflow messages with the encapsulated project data is done by the ExchangeService in XML. The presented design focuses on the integration of existing business and IT standards. The design of the four core components describes a possibility of standardization in the area of CAFM, which connects only the relevant data over processes detached from conventional export/import scenarios: <ul> <li>Reduction of the complexity of conventional product models by a standardization over meta models, the actual product and process models can be designed for end users and to their vocabulary of concepts adapted</li> <li>Support of the Ad-Hoc-manipulation of concrete product and process models, only thereby can be achieved an integration of different vocabulary of concepts</li> <li>The usage of standardized methods in the analysis and design phases makes a fast technical implementation of the individual services possible, especially during the integration of external software systems as always necessary in the CAFM sector</li> <li>Due to a clear interface specification external offers for individual services can be provided and used, the continuous use of XML makes an effective long-term data storage in a standardized, self-describing language possible</li></ul> / Der Begriff Facility Management bezeichnet eine Facette des unternehmerischen Managements, die es zum Ziel hat, die unternehmerischen Aktivitäten durch die Bereitstellung von Infrastruktur, Technologien und Diensten zu unterstützen und umfaßt den gesamten Lebenszyklus einer baulichen Anlage. Eine Einbettung von Facility Management in die laufenden Prozesse eines Unternehmens oder eines Unternehmensverbundes wird durch die Einführung eines leistungsfähigen, flexiblen und zukunftssicheren Computer Aided Facility Management Systems wesentlich unterstützt. Allerdings haben sich auf diesem Gebiet noch keine durchgängigen Standards etabliert, mit hohem Aufwand angepaßte Einzellösungen sind die Regel, verletzen aber die Forderung nach Investitionssicherheit unabhängig von den proprietären Speziallösungen einzelner Hersteller. Eine Analyse vorhandener Geschäftsstandards zeigt, daß diese Ansätze nur teilweise dazu geeignet sind, die vorhandenen Insellösungen in einem virtuellen Unternehmensverbund miteinander zu kombinieren, um einen tragfähigen Architekturansatz für ein prozeßorientiertes Facility Management zu schaffen. Dabei darf die Kommunikation nicht auf den reinen Datenaustausch reduziert werden, sondern nur stabile Schnittstellendefinitionen und exakt spezifizierte Dokumentenformate können zu einer durchgehenden Lösung führen. Die konkreten Modelle mit den enthaltenen Typen und deren Beziehungen zueinander werden über Metamodelle beschrieben. Der Einsatz von XML als Mittel zum Datenaustausch zwischen den einzelnen Komponenten und zur Beschreibung der Metamodelle garantiert eine flexible und zukunftssichere Entwicklungsgrundlage. Im Rahmen der Arbeit wird auf der Basis von Anwendungsfällen die Konzeption für ein Framework mit Kernkomponenten zum prozeßorientierten Facility Management in verteilten Umgebungen entworfen. Das vom Autor konzipierte Framework Simplix integriert Metamodelle zur Beschreibung konkreter Daten-, Workflow- und Zugriffsschemata. Die dazu geplanten Module werden in eine komponentenbasierte Architektur eingebettet, um eine größtmögliche Flexibilität beim Einsatz in heterogenen IT-Umgebungen zu erzielen. Das Framework Simplix umfaßt vier Kernkomponenten. Der SchemaService beschreibt die konkreten Produktmodelle, die zugehörigen Prozesse werden über den WorkflowService abgebildet. Die Realisierung der Mechanismen zur Zugriffskontrolle werden vom SecurityService übernommen. Der Austausch von Workflow-Nachrichten mit den gekapselten Projektdaten erfolgt über den ExchangeService in XML. Der vorgestellte Ansatz setzt auf die Integration vorhandener Geschäfts- und IT-Standards. Der Entwurf der vier Kernkomponenten beschreibt eine Möglichkeit der Standardisierung im CAFM-Sektor, die losgelöst von herkömmlichen Export-/Import-Szenarios funktioniert und nur die relevanten Daten über Prozesse verknüpft: <ul> <li>Reduzierung der Komplexität herkömmlicher Produktmodelle durch eine Standardisierung über Metamodelle, die eigentlichen Produkt- und Prozeßmodelle können für die Endanwender entworfen und an deren Begriffswelt angepaßt werden</li> <li>Unterstützung der Ad-Hoc-Manipulation von konkreten Produkt- und Prozeßmodellen, nur dadurch kann eine Integration verschiedener Begriffswelten erreicht werden</li> <li>der Einsatz standardisierter Techniken im Entwurf und dem Design ermöglicht eine schnelle technische Umsetzung der einzelnen Dienste gerade bei der im CAFM immer notwendigen Einbindung von Fremdsoftware</li> <li>auf Grund einer klaren Schnittstellenspezifikation können externe Serviceangebote für einzelne Dienste erstellt und genutzt werden, der durchgehende Einsatz von XML ermöglicht eine effektive Langzeitdatenhaltung in einem standardisierten, selbstbeschreibenden Format</li></ul>

<p>Background: With Web service growing popularity more and more companies chose to apply Web service in their organisation. With the rising usage of the concept the demands rise with it. For companies that deal with vulnerable information for example hospitals, there needs to be strong security measures taken.</p><p>Purpose: The aim of the report is to examine different security functions that can help developers to secure Web service applications. The report will be written so that organisations such as health care organisation can get insight on how to use a secure Web services in their line of work.</p><p>Method: One of the main methods used in this report is a qualitative hermeneutic way of thinking. The research process will apply Wallace’s model. The theoretical study is achieved with research on the subject through literature studies and published articles. Interviews that are used to gain knowledge are structured as quality orientated science surveys with semistandardised questions.</p><p>Conclusions: We believe the time has come for hospitals to investigate if Web service can help their organization. In case they choose to use Web services, we advise them to follow Web service Security’s recommendations to produce a web service that is adapted to their security needs.</p>

Im Rahmen der Diplomarbeit wurde ein modernes System zur Erledigung typischer Geschäftsvorfälle des URZ entwickelt. Die Arbeit betrachtet den Einsatz von XML als Grundlage der Implementation und unterschiedliche XML-Applikationen auf ihre Verwendbarkeit zur Repräsentation von URZ-Dokumenten. Laufende Geschäftsvorfälle wurden anhand ausgewählter Dokumententypen analysiert und deren Strukturen und Inhaltstypen in XML definiert. Die Dokumentenerstellung wird durch eine Web-basierte Nutzerschnittstelle gewährleistet.

Background: With Web service growing popularity more and more companies chose to apply Web service in their organisation. With the rising usage of the concept the demands rise with it. For companies that deal with vulnerable information for example hospitals, there needs to be strong security measures taken. Purpose: The aim of the report is to examine different security functions that can help developers to secure Web service applications. The report will be written so that organisations such as health care organisation can get insight on how to use a secure Web services in their line of work. Method: One of the main methods used in this report is a qualitative hermeneutic way of thinking. The research process will apply Wallace’s model. The theoretical study is achieved with research on the subject through literature studies and published articles. Interviews that are used to gain knowledge are structured as quality orientated science surveys with semistandardised questions. Conclusions: We believe the time has come for hospitals to investigate if Web service can help their organization. In case they choose to use Web services, we advise them to follow Web service Security’s recommendations to produce a web service that is adapted to their security needs.

No description available.

No description available.