Semantic representation and enforcement methods of ABAC policies
Zhou Jiage · Computer Engineering and Applications Journal · 2013
To solve the semantic presentation and enforcement problems of ABAC policies in the open system environment, a method using ontology to define policies is proposed. This method is defined on the basis of a map from ABAC policy model to description logic definitions. Also, it uses SWRL rules to define relations in the system. Based on the policy ontology, a framework utilizing close world reasoning and individual realization reasoning service to generate decisions of access request is proposed. The correctness of policy enforcement method is proved through its soundness and completeness, and an experiment is showed to verify the feasibility of these methods in a real application.