Fine-Grained Filtering of Data Providing Web Services with XACML
Kevin P. Brown, Michael A. Hayes, David S. Allison, Miriam A. M. Capretz, Rupinder Mann · 2012
This work describes how a fine-grained filtering Web service is generated using an extended XACML architecture for Data Providing Web Services (DPWSs). A DPWS is a Web service tasked with the retrieval of data that is annotated using a domain ontology. This work extends XACML policies to reference filtering classes from a filtering ontology instead of directly referencing fine-grained XML elements. This paper then contributes a language to state relations between the filtering ontology and the DPWS's domain ontology. It also contributes an algorithm to interpret these relations to determine if a given XML element from a DPWS is a member of a filtering class. This algorithm is then used by the extended XACML architecture to infer how a DPWS shall be filtered. This approach provides a clear separation of concerns between a DPWS's data domain and the filtering domain.