Access control for semantic data federations in industrial product-lifecycle management

Computers in Industry

Volumn 63, Issue 9, 2012, Pages 930-940

  Fabian, Benjamin ^a   Kunz, Steffen ^a   Konnegen, Marcel ^a   Müller, Sebastian ^b   Günther, Oliver ^c  

^a HUMBOLDT UNIVERSITY   (Germany)

^b FREIE UNIVERSITÄT BERLIN   (Germany)

^c UNIVERSITY OF POTSDAM   (Germany)

Author keywords

Access control; Data federation; Information integration; Product lifecycle management; Semantic data

Indexed keywords

BUSINESS PARTNERS; COMPLEX SUPPLY CHAIN; CONFIDENTIAL DATA; CONTROLLED SHARING; DATA FEDERATION; INDUSTRIAL SERVICES; INFORMATION INTEGRATION; PERFORMANCE EXPERIMENT; PRODUCT LIFE CYCLE MANAGEMENT; SECURITY SERVICES; SEMANTIC DATA; SEMANTIC REPOSITORY; SEMANTIC TECHNOLOGIES;

ACCESS CONTROL; ELECTRONIC DATA INTERCHANGE; INFORMATION RETRIEVAL; LIFE CYCLE; SEMANTICS; SUPPLY CHAINS;

INDUSTRY;

EID: 84868510699     PISSN: 01663615     EISSN: None     Source Type: Journal    
DOI: 10.1016/j.compind.2012.08.015     Document Type: Article

References (53)

1. F. Ameri, and D. Dutta Product lifecycle management: closing the knowledge loops Computer-Aided Design and Applications 2 5 2005 577 590
2. EPCglobal, The EPCglobal Architecture Framework - Version 1.3 (2009). http://www.epcglobalinc.org/standards/architecture/.
3. S. Kunz, F. Brecht, B. Fabian, M. Aleksy, and M. Wauer Aletheia - improving industrial service-lifecycle management by semantic data federations IEEE International Conference on Advanced Information Networking and Applications 2010
4. Aletheia, Aletheia Project Web Site (2010). http://www.aletheia-projekt. de.
5. M. Wauer, D. Schuster, J. Meinecke, T. Janke, and A. Schill Aletheia - towards a distributed architecture for semantic federation of comprehensive product information IADIS International Conference WWW/Internet Rome, Italy 2009
6. J. Bacon, K. Moody, and W. Yao Access control and trust in the use of widely distributed services Middleware 2001 2001 Springer 295 310
7. M. Gallaher, A. O'Connor, B. Kropp, The Economic Impact of Role-Based Access Control, NIST Planning Report 02-1 (2002).
8. A.C. O'Connor, R.J. Loomis, 2010. Economic Analysis of Role-Based Access Control, NIST Final Report (December 2010).
9. D. Ferraiolo, J. Barkley, Comparing Administrative Cost for Hierarchical and Non-hierarchical Role Representations, Second ACM Workshop on Role-Based Access Control (November 1997).
10. D. Gollmann Computer Security 2nd edition 2006 Wiley Chichester
11. D.F. Ferraiolo, D.R. Kuhn, and R. Chandramouli Role-Based Access Control 2007 Artech House
12. R. Thomas, and R. Sandhu Task-Based Authorization Controls (TBAC): a family of models for active and enterprise-oriented authorization management Database Security 11 1998 166 181
13. D. Ferraiolo, and R. Kuhn Role-based access control 15th NIST-NCSC National Computer Security Conference 1992 554 563
14. W. Tolone, G.-J. Ahn, T. Pai, and S.-P. Hong Access control in collaborative systems ACM Computing Surveys 37 2005 29 41
15. S. Oh, and S. Park Task-role-based access control model Information Systems 28 6 2003 533 562
16. M. Petrovic, M. Grossniklaus, and M. Norrie Role-based modelling of interactions in database applications E. Dubois, K. Pohl, Advanced Information Systems Engineering, vol. 4001 of LNCS 2006 Springer Berlin, Heidelberg 63 77
17. R. Sandhu, E. Coyne, H. Feinstein, and C. Youman Role-based access control models Computer 29 2 1996 38 47
18. R. Sandhu, D. Ferraiolo, and R. Kuhn The NIST model for role-based access control: towards a unified standard Proceedings of the 5th ACM Workshop on Role-Based Access Control (RBAC'00) 2000 ACM New York, NY, USA 47 63
19. D.F. Ferraiolo, R. Sandhu, S. Gavrila, D.R. Kuhn, and R. Chandramouli Proposed NIST standard for role-based access control ACM Transactions on Information and System Security (TISSEC) 4 3 2001 224 274
20. N. Li, J.-W. Byun, and E. Bertino A critique of the ANSI standard on role-based access control IEEE Security and Privacy 5 6 2007 41 49
21. D. Ferraiolo, R. Kuhn, and R. Sandhu RBAC standard rationale: comments on a critique of the ANSI standard on role based access control IEEE Security & Privacy 5 6 2007 51 53
22. G. Neumann, and M. Strembeck A scenario-driven role engineering process for functional RBAC roles Proceedings of the Seventh ACM Symposium on Access Control Models and Technologies 2002 ACM New York, NY, USA 33 42
23. M. Strembeck A role engineering tool for role-based access control Proceedings of the 3rd Symposium on Requirements Engineering for Information Security (SREIS) 2005 Citeseer
24. M. Lorch, S. Proctor, R. Lepro, D. Kafura, and S. Shah First experiences using XACML for access control in distributed systems ACM Workshop on XML Security Fairfax, Virginia 2003 25 37
25. OASIS, eXtensible Access Control Markup Language (XACML) Version 2.0 (2005). http://docs.oasis-open.org/xacml/2.0/access-control-xacml-2.0-core-spec- os.pdf.
26. P. Lamb, R. Power, G. Walker, and M. Compton Role-based access control for data service integration Proceedings of the 3rd ACM Workshop on Secure Web Services Alexandria, Virginia, USA 2006 3 12
27. U. Mbanaso, G. Cooper, D. Chadwick, and S. Proctor Privacy preserving trust authorization framework using XACML Proceedings of the 2006 International Symposium on World of Wireless, Mobile and Multimedia Networks Los Alamitos, CA, USA 2006 673 678
28. P. Mazzoleni, B. Crispo, S. Sivasubramanian, and E. Bertino XACML policy integration algorithms ACM Transactions of Information System Security 11 1 2008 1 29
29. J. Alqatawna, E. Rissanen, and B. Sadighi Overriding of access control in XACML Eighth IEEE International Workshop on Policies for Distributed Systems and Networks 2007 IEEE Computer Society Los Alamitos, CA, USA 87 95
30. C.-C. Pan, P. Mitra, and P. Liu Semantic access control for information interoperation Proceedings of the Eleventh ACM Symposium on Access Control Models and Technologies, SACMAT'06 2006 ACM New York, NY, USA 237 246
31. E. Damiani, S.D.C. di Vimercati, C. Fugazza, and P. Samarati Extending policy languages to the semantic web Web Engineering 2004 330 343
32. B. Thuraisingham Building Trustworthy Semantic Webs 2007 CRC Press
33. S. Agarwal, B. Sprick, and S. Wortmann Credential based access control for semantic web services AAAI Spring Symposium-Semantic Web Services 2004 44 52
34. A. Ankolekar, M. Burstein, J. Hobbs, O. Lassila, D. Martin, D. McDermott, S. McIlraith, S. Narayanan, M. Paolucci, T. Payne, and K. Sycara DAML-S: web service description for the semantic web I. Horrocks, J. Hendler, The Semantic Web - ISWC 2002, vol. 2342 of Lecture Notes in Computer Science 2002 Springer Berlin, Heidelberg 348 363
35. G. Flouris, I. Fundulaki, M. Michou, and G. Antoniou Controlling access to RDF graphs A. Berre, A. Gomez-Perez, K. Tutschku, D. Fensel, Future Internet - FIS 2010, vol. 6369 of Lecture Notes in Computer Science 2010 Springer Berlin, Heidelberg 107 117
36. F. Abel, J. De Coi, N. Henze, A. Koesling, D. Krause, and D. Olmedilla Enabling advanced and context-dependent access control in RDF stores The Semantic Web, vol. 4825 of LNCS 2007 Springer pp. 1-14
37. P. Reddivari Policy-based access control for an RDF store Policy Management for the Web Workshop 2005 78 83
38. J. Kim, K. Jung, and S. Park An introduction to authorization conflict problem in RDF access control I. Lovrek, R. Howlett, L. Jain, Knowledge-Based Intelligent Information and Engineering Systems, vol. 5178 of Lecture Notes in Computer Science 2008 Springer Berlin, Heidelberg 583 592
39. J. Li, and W. Cheung Query rewriting for access control on semantic web Secure Data Management 2008 151 168
40. S. Evdokimov, B. Fabian, and S. Kunz Challenges for access control in knowledge federations Proceedings of the International Conference on Knowledge Management and Information Sharing (KMIS 2009) Madeira, Portugal 2009 224 229
41. S. Kunz, S. Evdokimov, B. Fabian, B. Stieger, and M. Strembeck Role-based access control for information federations in the industrial service sector 18th European Conference on Information Systems 2010
42. R. Kanneganti, and P. Chodavarapu SOA Security 2008 Manning
43. M. Golfarelli, and S. Rizzi Designing the data warehouse: key steps and crucial issues Journal of Computer Science and Information Management 2 1999
44. W3C, SOAP Version 1.2 (2007). http://www.w3.org/TR/soap/.
45. T. Dierks, E. Rescorla, The Transport Layer Security (TLS) Protocol, RFC 4346. http://www.ietf.org/rfc/rfc4346.txt.
46. OASIS, Web Services Security: SOAP Message Security 1.1 (2006). http://docs.oasis-open.org/wss/v1.1/.
47. W3C, Resource Description Framework (RDF): Concepts and Abstract Syntax, W3C Recommendation (2004). http://www.w3.org/TR/rdf-concepts/.
48. W3C, SPARQL Query Language for RDF, W3C Recommendation (2008). http://www.w3.org/TR/rdf-sparql-query/.
49. W3C, XQuery 1.0: An XML Query Language (2007). http://www.w3.org/TR/ xquery/.
50. I.R. Forman, and N. Forman Java Reflection in Action 2004 Manning
51. Jena, Jena Project Web Site (2010). http://www.openjena.org/.
52. OpenSSO, OpenSSO Project Web Site (2010). https://opensso.dev.java.net/.
53. OMG, Business Process Model and Notation (BPMN) 2.0 (November 2009). http://www.omg.org/spec/BPMN/2.0.