Ontology based policy interoperability in geo-spatial domain

With advances of digital technology two or more organizations form a federation for a temporary purpose. It is possible that an employee of an organization needs to access resource of another organization. While languages like XACML are very good for access control of a single organization, they are not able to address interoperability issues of such federations. Lack of interoperability of access control policies does not allow someone to access remote resources. In this paper we propose an approach by augmenting with knowledge-base, Ontology that will facilitate access control policies to provide resources of remote organizations. In addition, we introduce a new effect of the rule, partial permit in our application domain (Geo-Spatial).

随着数字技术的进步，两个或更多的组织为了一个临时目的组成一个联盟。一个组织的员工可能需要访问另一个组织的资源。虽然像XACML这样的语言非常适用于单个组织的访问控制，但它们无法解决此类联盟的互操作性问题。访问控制策略缺乏互操作性使得人们无法访问远程资源。在本文中，我们提出一种通过增加知识库和本体的方法，这将促进访问控制策略以提供远程组织的资源。此外，我们在我们的应用领域（地理空间）中引入了规则的一种新效果，即部分许可。