Using OWL and SWRL to represent and reason with situation-based access control policies

Data and Knowledge Engineering

Volumn 70, Issue 6, 2011, Pages 596-615

  Beimel, Dizza ^a   Peleg, Mor ^b  

^a RUPPIN ACADEMIC CENTER   (Israel)

^b UNIVERSITY OF HAIFA   (Israel)

Author keywords

Access control; Conceptual model; Knowledge framework; Knowledge model; OWL; SWRL

Indexed keywords

BIRDS; DATA DESCRIPTION; ENGINES; HEALTH CARE; ONTOLOGY;

ACCESS CONTROL POLICIES; CONCEPTUAL MODEL; CONTEXT-BASED ACCESS CONTROLS; KNOWLEDGE CLASSIFICATION; KNOWLEDGE FRAMEWORKS; KNOWLEDGE MODEL; SEMANTIC WEB RULE LANGUAGE(SWRL); SWRL;

ACCESS CONTROL;

EID: 79955906988     PISSN: 0169023X     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.datak.2011.03.006     Document Type: Article

References (44)

1. US Department of Health and Human Services, Summary of the HIPAA privacy rule http://www.hhs.gov/ocr/privacy/hipaa/understanding/summary/privacysummary. pdf 2003 last accessed 25.12.10
2. R. Sandhu, E. Coyne, and C. Youman Role-based access control models IEEE Computer 29 1996 38 47
3. R. Sandhu The NIST Model for role-based access control: toward a unified standard Proc Fifth ACM Workshop on Role-Based Access Control 2000 47 63
4. M. Peleg, D. Beimel, D. Dori, and Y. Denekamp Situation-based access control: privacy management via modeling of patient data access scenarios Journal of Biomedical Informatics 41 2008 1028 1040
5. T. Gruber Toward principles for the design of ontologies used for knowledge sharing International Journal of Human Computer Studies 43 1995 907 928
6. M. Genesereth, and N. Nilsson Logical Foundations of Artificial Intelligence 1987 Morgan Kaufmann Publishers San Mateo, CA
7. T. Gruber The role of common ontology in achieving sharable, reusable knowledge bases Proc Second Intl Conference 1991 601 602
8. T. Strang, and C. Linnhoff-Popien A context modeling survey First Intl Workshop on Advanced Context Modeling, Reasoning And Management 2004
9. Web Ontology Language (OWL) http://www.w3.org/2001/sw/WebOnt/ last accessed on 25.12.2010
10. N. Noy, and D. McGuinness Ontology Development 101: A Guide to Creating Your First Ontology, Stanford Knowledge Systems Laboratory Technical Report No.: KSL-01-05 http://www.ksl.stanford.edu/people/dlm/papers/ontology-tutorial-noy- mcguinness-abstract.html 2001 last accessed on 25.12.2010
11. F. Baader, D. Calvanese, D. McGuinness, D. Nardi, and P. Patel-Schneider The Description Logic Handbook 2003 Cambridge University Press UK http://dl.kr.org/ last accessed on 25/12/2010
12. SWRL: A Semantic Web Rule Language Combining OWL and RuleML http://www.w3.org/Submission/SWRL/ 2010 last accessed on 25.12.2010
13. R. Stevens, M. Aranguren, U. Sattler, N. Drummond, M. Horridge, and A. Rector Using OWL to model biological knowledge International Journal of Human Computer Studies 65 7 2007 583 594 (Pubitemid 46803278)
14. E. Sirin, and B. Parsia Pellet: an OWL DL reasoner Proc Intl Workshop on Description Logics (DL2004) 2004 212 214
15. S. Grimm, and P. Hitzler Semantic matchmaking of web resources with local closed-world reasoning International Journal of Electronic Commerce 12 2008 89 126
16. Y. Katz, and B. Parsia Towards a nonmonotonic extension to OWL Proc. Workshop on OWL Experiences and Directions 2005
17. R. Rosati On the decidability and complexity of integrating ontologies and rules Journal of Web Semantics 3 2005 61 73 (Pubitemid 40891659)
18. T. Eiter, T. Lukasiewicz, R. Schindlauer, and H. Tompits Combining answer set programming with description logics for the semantic web Proc 9 Intl Conf Principles of Knowledge Representation and Reasoning 2004
19. Clark & Parsia LLC Does Pellet support closed world reasoning? http://clarkparsia.com/pellet/faq/closed-world/ 2009
20. C.H. Liu, K.L. Chang, J.J.Y. Chen, and S.C. Hung Ontology-based context representation and reasoning using OWL and SWRL 8th Annual Communication Networks and Services Research Conference 2010 IEEE Computer Society Washington, DC 215 220
21. R. Bhatti, D. Gao, and W.S. Li Enabling policy-based access control in BI applications Data & Knowledge Engineering 2008 199 222
22. M. Baldauf, and S. Dustdar A survey on context-aware systems Technical Report TUV-1841-2004-24 2004 Technical University of Vienna
23. G. Motta, and S. Furuie A contextual role-based access control authorization model for electronic patient record IEEE Transactions on Information Technology in Biomedicine 7 2003 202 207
24. D. Beimel, and M. Peleg The context and the SitBAC models for privacy preservation - an experimental comparison of model comprehension and synthesis IEEE Transactions on Knowledge and Data Engineering 22 2010 1475 1488
25. L. Wang, D. Wijesekera, and S. Jajodia A logic-based framework for attribute based access control Proc ACM Workshop on Formal Methods in Security Engineering 2004 45 55 (Pubitemid 40821073)
26. B. Carminati, E. Ferrari, and A. Perego Enforcing access control in web-based social networks ACM Transactions on Information and System Security 2009 1 38 Article 6
27. eXtensible Access Control Markup Language (XACML), Version 2.0 February 1, 2005 OASIS Standard
28. R. Bhatti, A. Samuel, M. Eltabakh, H. Amjad, and A. Ghafoor Engineering a policy-based system for federated healthcare databases IEEE Transactions on Knowledge and Data Engineering 19 2007 1288 1304 (Pubitemid 47273595)
29. L. Kagal, T. Finin, and A. Joshi A policy language for a pervasive computing environment Proc IEEE Intl Workshop on Policies for Distributed Systems and Networks (POLICY) 2003 63 74
30. L. Kagal, and J. Pato Preserving privacy based on semantic policy tools IEEE Security and Privacy 8 2010 25 30
31. L. Kagal, C. Hanson, and D. Weitzner Using dependency tracking to provide explanations for policy management IEEE Policy 2008 2008
32. S. Agarwal, and B. Sprick Specification of access control and certification policies for semantic web services 6th Intl Conference on Electronic Commerce and Web Technologies 2005 348 357 (Pubitemid 41450377)
33. B. Shields, O. Molloy, G. Lyons, and J. Duggan Using semantic rules to determine access control for web services Proc 15th Intl Conference on World Wide Web (WWW 2006) 2006 913 914 (Pubitemid 46946716)
34. T. Finin, A. Joshi, L. Kagal, J. Niu, and R. Sandhu ROWLBAC - representing role based access control in OWL Proc 13th Symposium on Access Control Models and Technologies 2008 73 82
35. W. Di, L. Jian, D. Yabo, and Z. Miaoliang Using semantic web technologies to specify constraints of RBAC Intl Conference on Parallel and Distributed Computing, Applications and Technologies 2005 543 545
36. J. Bradshaw, A. Uszok, R. Jeffers, N. Suri, P. Hayes, and M. Burstein Representation and reasoning for DAML-based policy and domain services in KAoS and nomads Intl Conference on Autonomous Agents 2003 835 842
37. A. Toninelli, R. Montanari, L. Kagal, and O. Lassila Proteus: a semantic context-aware adaptive policy model IEEE Intl Workshop on Policies for Distributed Systems and Networks 2007 129 140
38. G. Tonti, J. Bradshaw, R. Jeffers, and R. Montanari Semantic web languages for policy representation and reasoning: a comparison of KAoS, Rei, and Ponder Proc Intl Semantic Web Conference 2003 419 437
39. Rumbaugh, Jacobson, and Booch The Unified Modeling Language Reference Manual 2010 Addison-Wesley
40. D. Beimel, M. Peleg, and T. Redmond Reasoning about access-control- situations with OWL The 11th Intl Protégé Conference, Amsterdam, Netherlands 2009
41. I. Horrocks, U. Sattler, and S. Tobies Practical reasoning for expressive description logics Proc. of the 6th Int. Conf. on Logic for Programming and Automated Reasoning (LPAR'99) 8 2000 239 263
42. DL Complexity Navigator http://www.cs.manchester.ac.uk/~ezolin/dl/ 2010 last accessed on 25.12.2010
43. S. Bader, P. Hitzler, and A. Witzel Integrating first-order logic programs and connectionist systems - a constructive approach Proc IJCAI-05 Workshop on Neural-Symbolic Learning and Reasoning 2005
44. F.S. Parreiras, and S. Staab Using ontologies with UML class-based modeling: the twouse approach Data & Knowledge Engineering 2010 1194 1207