Concept-level access control for the Semantic Web

Li Qin; Vijayalakshmi Atluri

doi:https://doi.org/10.1145/968559.968575

Concept-level access control for the Semantic Web

Li Qin, Vijayalakshmi Atluri

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

78 Scopus citations

Abstract

Recently, the notion of the Semantic Web has been introduced to define a machine-interpretable web targeted for automation, integration and reuse of data across different applications. Under the Semantic Web, web pages are annotated by concepts that are formally defined in ontologies along with the relationships among them. As information pertaining to different concepts has varying access control requirements, in this paper, we propose an access control model for the semantic web that is capable of specifying authorizations over concepts defined in ontologies and enforcing them upon data instances annotated by the concepts. It is important to note that semantic relationships among concepts play a key role in making access control decisions. This is because, based on the relationship, one may infer information contained in one concept node from that of the other. Therefore, we first identify the important domain-independent relationships among concepts, categorize them and propose propagation policies based on these categories of relationships. In particular, we allow propagation of authorizations based on the semantic relationships among concepts to prevent illegal inferences. We then show how concept-level security polices can be represented in an OWL-based access control language. Finally, we demonstrate how users' requests can be handled under our access control model. Our concept-level model is especially suitable for the specification and administration of access control over semantically related web data under the Semantic Web even if they conform to different DTDs or use different tag names.

Original language	English (US)
Title of host publication	Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)
Publisher	Association for Computing Machinery
Pages	94-103
Number of pages	10
ISBN (Print)	158113777X, 9781581137774
DOIs	https://doi.org/10.1145/968559.968575
State	Published - 2003
Externally published	Yes
Event	Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security) - Fairfax, VA, United States Duration: Oct 31 2003 → Oct 31 2003

Publication series

Name	Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)

Other

Other	Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)
Country/Territory	United States
City	Fairfax, VA
Period	10/31/03 → 10/31/03

ASJC Scopus subject areas

Engineering(all)

Keywords

Access control
Concept
Ontology
Propagation
Semantic Web

Access to Document

https://doi.org/10.1145/968559.968575

Cite this

Qin, L., & Atluri, V. (2003). Concept-level access control for the Semantic Web. In Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security) (pp. 94-103). (Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)). Association for Computing Machinery. https://doi.org/10.1145/968559.968575

Qin, Li ; Atluri, Vijayalakshmi. / Concept-level access control for the Semantic Web. Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security). Association for Computing Machinery, 2003. pp. 94-103 (Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)).

@inproceedings{a1fd23086d3540899acb1a9a8b707e78,

title = "Concept-level access control for the Semantic Web",

abstract = "Recently, the notion of the Semantic Web has been introduced to define a machine-interpretable web targeted for automation, integration and reuse of data across different applications. Under the Semantic Web, web pages are annotated by concepts that are formally defined in ontologies along with the relationships among them. As information pertaining to different concepts has varying access control requirements, in this paper, we propose an access control model for the semantic web that is capable of specifying authorizations over concepts defined in ontologies and enforcing them upon data instances annotated by the concepts. It is important to note that semantic relationships among concepts play a key role in making access control decisions. This is because, based on the relationship, one may infer information contained in one concept node from that of the other. Therefore, we first identify the important domain-independent relationships among concepts, categorize them and propose propagation policies based on these categories of relationships. In particular, we allow propagation of authorizations based on the semantic relationships among concepts to prevent illegal inferences. We then show how concept-level security polices can be represented in an OWL-based access control language. Finally, we demonstrate how users' requests can be handled under our access control model. Our concept-level model is especially suitable for the specification and administration of access control over semantically related web data under the Semantic Web even if they conform to different DTDs or use different tag names.",

keywords = "Access control, Concept, Ontology, Propagation, Semantic Web",

author = "Li Qin and Vijayalakshmi Atluri",

year = "2003",

doi = "https://doi.org/10.1145/968559.968575",

language = "English (US)",

isbn = "158113777X",

series = "Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)",

publisher = "Association for Computing Machinery",

pages = "94--103",

booktitle = "Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)",

note = "Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security) ; Conference date: 31-10-2003 Through 31-10-2003",

}

Qin, L & Atluri, V 2003, Concept-level access control for the Semantic Web. in Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security). Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security), Association for Computing Machinery, pp. 94-103, Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security), Fairfax, VA, United States, 10/31/03. https://doi.org/10.1145/968559.968575

Concept-level access control for the Semantic Web. / Qin, Li; Atluri, Vijayalakshmi.
Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security). Association for Computing Machinery, 2003. p. 94-103 (Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

TY - GEN

T1 - Concept-level access control for the Semantic Web

AU - Qin, Li

AU - Atluri, Vijayalakshmi

PY - 2003

Y1 - 2003

N2 - Recently, the notion of the Semantic Web has been introduced to define a machine-interpretable web targeted for automation, integration and reuse of data across different applications. Under the Semantic Web, web pages are annotated by concepts that are formally defined in ontologies along with the relationships among them. As information pertaining to different concepts has varying access control requirements, in this paper, we propose an access control model for the semantic web that is capable of specifying authorizations over concepts defined in ontologies and enforcing them upon data instances annotated by the concepts. It is important to note that semantic relationships among concepts play a key role in making access control decisions. This is because, based on the relationship, one may infer information contained in one concept node from that of the other. Therefore, we first identify the important domain-independent relationships among concepts, categorize them and propose propagation policies based on these categories of relationships. In particular, we allow propagation of authorizations based on the semantic relationships among concepts to prevent illegal inferences. We then show how concept-level security polices can be represented in an OWL-based access control language. Finally, we demonstrate how users' requests can be handled under our access control model. Our concept-level model is especially suitable for the specification and administration of access control over semantically related web data under the Semantic Web even if they conform to different DTDs or use different tag names.

AB - Recently, the notion of the Semantic Web has been introduced to define a machine-interpretable web targeted for automation, integration and reuse of data across different applications. Under the Semantic Web, web pages are annotated by concepts that are formally defined in ontologies along with the relationships among them. As information pertaining to different concepts has varying access control requirements, in this paper, we propose an access control model for the semantic web that is capable of specifying authorizations over concepts defined in ontologies and enforcing them upon data instances annotated by the concepts. It is important to note that semantic relationships among concepts play a key role in making access control decisions. This is because, based on the relationship, one may infer information contained in one concept node from that of the other. Therefore, we first identify the important domain-independent relationships among concepts, categorize them and propose propagation policies based on these categories of relationships. In particular, we allow propagation of authorizations based on the semantic relationships among concepts to prevent illegal inferences. We then show how concept-level security polices can be represented in an OWL-based access control language. Finally, we demonstrate how users' requests can be handled under our access control model. Our concept-level model is especially suitable for the specification and administration of access control over semantically related web data under the Semantic Web even if they conform to different DTDs or use different tag names.

KW - Access control

KW - Concept

KW - Ontology

KW - Propagation

KW - Semantic Web

UR - http://www.scopus.com/inward/record.url?scp=3543150771&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=3543150771&partnerID=8YFLogxK

U2 - https://doi.org/10.1145/968559.968575

DO - https://doi.org/10.1145/968559.968575

M3 - Conference contribution

SN - 158113777X

SN - 9781581137774

T3 - Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)

SP - 94

EP - 103

BT - Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)

PB - Association for Computing Machinery

T2 - Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)

Y2 - 31 October 2003 through 31 October 2003

ER -

Qin L, Atluri V. Concept-level access control for the Semantic Web. In Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security). Association for Computing Machinery. 2003. p. 94-103. (Proceedings of the ACM Workshop on XML Security 2003 (In Association with 10th ACM Conference on Computer and Communications Security)). doi: https://doi.org/10.1145/968559.968575

Concept-level access control for the Semantic Web

Abstract

Publication series

Other

ASJC Scopus subject areas

Keywords

Access to Document

Other files and links

Fingerprint

Cite this