The paper presents Relation Based Access Control RelBAC, a model and a logic for access control which models communities, possibly nested, and resources, possibly organized inside complex file systems, as lightweight ontologies, and permissions as relations between subjects and objects. RelBAC allows us to represent expressive access control rules beyond the current state of the art, and to deal with the strong dynamics of subjects, objects and permissions which arise in Web 2.0 applications (e.g. social networks). Finally, as shown in the paper, using RelBAC, it becomes possible to reason about access control policies and, in particular to compute candidate permissions by matching subject ontologies (representing their interests) with resource ontologies (describing their characteristics). (c) 2011 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other users
Access Control via Lightweight Ontologies / Giunchiglia, Fausto; Crispo, Bruno; Zhang, Rui. - ELETTRONICO. - (2011).
Access Control via Lightweight Ontologies
Giunchiglia, FaustoPrimo
;Crispo, BrunoSecondo
;Zhang, RuiUltimo
2011-01-01
Abstract
The paper presents Relation Based Access Control RelBAC, a model and a logic for access control which models communities, possibly nested, and resources, possibly organized inside complex file systems, as lightweight ontologies, and permissions as relations between subjects and objects. RelBAC allows us to represent expressive access control rules beyond the current state of the art, and to deal with the strong dynamics of subjects, objects and permissions which arise in Web 2.0 applications (e.g. social networks). Finally, as shown in the paper, using RelBAC, it becomes possible to reason about access control policies and, in particular to compute candidate permissions by matching subject ontologies (representing their interests) with resource ontologies (describing their characteristics). (c) 2011 IEEE. Personal use of this material is permitted. Permission from IEEE must be obtained for all other usersFile | Dimensione | Formato | |
---|---|---|---|
techRep467.pdf
accesso aperto
Tipologia:
Versione editoriale (Publisher’s layout)
Licenza:
Tutti i diritti riservati (All rights reserved)
Dimensione
259.18 kB
Formato
Adobe PDF
|
259.18 kB | Adobe PDF | Visualizza/Apri |
I documenti in IRIS sono protetti da copyright e tutti i diritti sono riservati, salvo diversa indicazione