Semantic Rule Based RBAC Extension Model for Flexible Resource Allocation

摘要

Access control plays an important role in restricting the access of key resources, preventing from invasion of illegal users or the damages caused by legal users’ unintended operations. However, most of approaches for extending the semantic description of RBAC failed to seamlessly integrate knowledge representation of RBAC and domain specific rules together. In this paper, we present a semantic rules based RBAC extension model for flexible data access and resource allocation. We first give the formal concept of the extension model. Then we discuss how to describe RBAC permission for the seamless integration in the OWL semantic description and the SWRL semantic rule description. At last, we generate the uniform authorization views based on SPARQL query, which include views authorized by both explicit and implicit manners.