Supporting attribute-based access control in authorization and authentication infrastructures with ontologies

Journal of Software

Volumn 2, Issue 1, 2007, Pages 27-38

  Priebe, Torsten ^a   Dobmeier, Wolfgang ^b   Schläger, Christian ^b   Kamprath, Nora ^c  

^a Capgemini Consulting Osterreich AG   (Austria)

^b UNIVERSITY OF REGENSBURG   (Germany)

^c KPMG AG   (Germany)

Author keywords

Attribute management; Attribute based access control; Authorization and authentication infrastructures; Ontologies; Security; Semantic web

Indexed keywords

ATTRIBUTE BASED ACCESS CONTROL; AUTHENTICATION AND AUTHORIZATION INFRASTRUCTURE; AUTHENTICATION INFRASTRUCTURE; CONTROL PROCESS; ERROR PRONES; EXTERNAL KNOWLEDGE; OPEN STANDARDS; POLICY MANAGEMENT; SECURITY; SEMANTIC ATTRIBUTE; SEMANTIC CONTEXT;

ONTOLOGY; OPEN SYSTEMS; SEMANTIC WEB;

AUTHENTICATION;

EID: 62949114652     PISSN: 1796217X     EISSN: None     Source Type: Journal    
DOI: 10.4304/jsw.2.1.27-38     Document Type: Article

References (25)

1. D.F. Ferraiolo, R. Sandhu, S. Gavrila, D. Kuhn, and R. Chandramouli, "Proposed NIST Standard for Role-based Access Control, " ACM Transactions on Information and Systems Security, Volume 4, Number 3, August 2001, pp. 224-274.
2. T. Priebe, E.B. Fernandez, J.I. Mehlau, and G. Pernul, "A Pattern System for Access Control, " Proc. 18th Annual IFIP WG 11.3 Working Conference on Data and Application Security, Sitges, Spain, July 2004, pp. 235-249.
3. T. Priebe, W. Dobmeier, B. Muschall, and G. Pernul, "ABAC-Ein Referenzmodell für attributbasierte Zugriffskontrolle, " Proc. 2. Jahrestagung Fachbereich Sicherheit der Gesellschaft für Informatik (Sicherheit 2005), Regensburg, Germany, April 2005, pp. 285-296.
4. E. Yuan and J. Tong, "Attribute Based Access Control (ABAC) for Web Services, " Proc. 3rd International Conference on Web Services (ICWS 2005), Orlando, USA, July 2005, pp. 561-569.
5. OASIS eXtensible Access Control Markup Language Technical Committee, "eXtensible Access Control Markup Language (XACML). " http://www.oasis-open.org/ committees/tc_home.php?wg_abbrev=xacml
6. T. Priebe, W. Dobmeier, N. Kamprath, "Supporting Attributedbased Access Control with Ontologies, " Proc. of the First International Conference on Availability, Reliability and Security (ARES 2006), Vienna, Austria, April 2006, pp. 465-472.
7. "Resource Description Framework (RDF): Concepts and Abstract Syntax, " World Wide Web Consortium, February 2004. http://www.w3.org/TR/2004/ REC-rdf-concepts-20040210/
8. "OWL Web Ontology Language Overview, " World Wide Web Consortium, February 2004. http://www.w3.org/ TR/2004/REC-owl-features-20040210/
9. C. Schläger, T. Nowey, and J.A. Montenegro, "A Reference Model for Authentication and Authorisation Infrastructures Respecting Privacy and Flexibility in b2c eCommerce, " Proc. of the First International Conference on Availability, Reliability and Security (ARES 2006), Vienna, Austria, April 2006, pp. 709-716.
10. T. Berners-Lee, "A Roadmap to the SemanticWeb, " WorldWide Web Consortium, September 1998. http://www.w3.org/ DesignIssues/Semantic.html
11. "RDF Vocabulary Description Language 1.0: RDF Schema, " World Wide Web Consortium, February 2004. http://www. w3.org/TR/2004/REC-rdf-schema-20040210/
12. "SWRL: A Semantic Web Rule Language Combining OWL and RuleML, " Joint US/EU ad hoc Agent Markup Language Committee, November 2003. http://www.daml.org/2003/ 11/swrl/
13. "SPARQL Query Language for RDF, " World Wide Web Consortium, February 2005. http://www.w3.org/TR/2005/ WD-rdf-sparql-query-20050217/
14. C. Schlaeger, M. Sojer, B. Muschall, and G. Pernul, "Attributebased Authentication and Authorisation Infrastructures for ECommerce Providers, " Proc. of the 7th International Conference on Electronic Commerce and Web Technologies (EC-Web 2006), in press.
15. E. Damiani, S. David, S. De Capitani di Vimercati, C. Fugazza, and P. Samarati, "Open World Reasoning in Semantics-Aware Access Control:a Preliminary Study, " Proc. 2nd Italian Semantic Web Workshop (SWAP 2005), Trento, Italy, December 2005.
16. E. Damiani, S. De Capitanidi Vimercati, C. Cristiano Fugazza, and P. Samarati, "Modality Conflicts in Semantics Aware Access Control, " Proc. 6th International Conference on Web Engineering (ICWE 2006), Menlo Park, USA, July 2006, pp. 249-256.
17. J. Lopez, R. Oppliger, and G. Pernul, "Authentication and Authorization Infrastructures (AAIs): A Comparative Survey, " Computers & Security, vol. 23, pp.578-590, 2004.
18. C. Schläger and G. Pernul, "Authentication and Authorisation Infrastructures in b2c e-Commerce, " Proc. 6th International Conference on Electronic Commerce and Web Technologies (EC-Web 2005), Copenhagen, Denmark, September 2005, pp. 306-315.
19. Sokratis K. Katsikas, Javier Lopez, and Günther Pernul, "Trust, Privacy and Security in E-business: Requirements and Solutions, " Proc. of the 10th Panhellenic Conference on Informatics (PCI'2005), Volos, Greece, November 2005, pp. 548-558.
20. M. Yagüe, A. Mana, J. Lopez, and J.M. Troya, "Applying the Semantic Web Layers to Access Control, " Proc. of the DEXA 2003 Workshop on Web Semantics (WebS 2003), Prague, Czech Republic, September 2003, pp. 622-626.
21. E. Damiani, S. De Capitanidi Vimercati, C. Fugazza, and P. Samarati, "Extending Policy Languages to the Semantic Web, " Proc. Web Engineering-4th International Conference (ICWE 2004), Munich, Germany, July 2004, pp. 330-343.
22. L. Kagal, T. Finin, and A. Joshi, "A Policy Based Approach to Security for the Semantic Web, " Proc. 2nd International Semantic Web Conference (ISWC 2003), Sanibel Island, FL, October 2003, pp. 402-418.
23. A. Uszok et al., "KAoS Policy and Domain Services: Toward a Description-Logic Approach to Policy Representation, Deconfliction and Enforcement, " Proc. 4th IEEE International Workshop on Policies for Distributed Systems and Networks (POLICY 2003), Comersee, Italy, June 2003, pp.93-98.
24. H. Li, X. Zhang, H. Wu, and Y. Qu, "Design and Application of Rule Based Access Control Policies, " Proc. Semantic Web and Policy Workshop in conjunction with the 4th International Semantic Web Conference (SWPW 2005), Galway, Ireland, November 2005. http://www.csee.umbc.edu/ swpw/papers/zhang.pdf
25. B. Shields, O. Molloy, G. Lyons, and J. Duggan, "Using Semantic Rules to Determine Access Control forWeb Services, " Proc. 15th International Conference on World Wide Web (WWW 2006), Edinburgh, Scotland, May 2006, pp. 913-914.