RelBAC: Relation Based Access Control

摘要: The Web 2.0, GRID applications and, more recently, semantic desktop are bringing the to a situation where and data metadata shared made available large user groups. In this context, may be tags or complex graph structures such as file system web directories, (lightweight) ontologies. turn, users can themselves tagged by certain properties, organized in directory structures, very much same way data. Things further complicated highly unpredictable autonomous dynamics of data, users, permissions access control rules. paper we propose new model logic, called RelBAC (for Relation Based Access Control) which allows us deal with novel scenario. key idea, differentiates from state art, e.g., Role Control (RBAC), is that modeled relations between while rules their instantiations on specific sets objects. As such, assigned an arity fine tuning evolve independently, according desires policy manager(s). Furthermore, formalization Entity-Relationship (ER) for its direct translation into Description Logics (DL). reason, possibly at run time, about policies.