论文信息 - Access control for semantic Web services

Access control for semantic Web services

In this paper, we present an approach to enable access control for semantic Web services. Our approach builds on the idea of autonomous granting of access rights, decision making based on independent trust structures and respects privacy requirements of the users. Our framework allows the specification and computation of complex access control policies in a manageable and efficient way. Therefore, our approach is useful not only in Web services based applications (typically client-server architecture) but also in peer-to-peer and agent-based applications.

Sudhir Agarwal | Barbara Sprick

[1] Sabrina De Capitani di Vimercati,et al. Access Control: Policies, Models, and Mechanisms , 2000, FOSAD.

[2] Peter F. Patel-Schneider,et al. Layering the Semantic Web: Problems and Directions , 2002, SEMWEB.

[3] Timothy W. Finin,et al. A Policy Based Approach to Security for the Semantic Web , 2003, SEMWEB.

[4] Jerry R. Hobbs,et al. DAML-S: Web Service Description for the Semantic Web , 2002, SEMWEB.

[5] Matt Bishop,et al. Computer Security: Art and Science , 2002 .

[6] Timothy W. Finin,et al. Sowl: A security infrastructure for owl-s-an approach to c onfidentiality and integrity , 2004 .

[7] Dorothy E. Denning,et al. Cryptography and Data Security , 1982 .

[8] Ronald L. Rivest,et al. SDSI - A Simple Distributed Security Infrastructure , 1996 .

[9] Sudhir Agarwal,et al. Credential Based Access Control for Semantic Web Services , 2004 .

[10] Timothy W. Finin,et al. Security for DAML Web Services: Annotation and Matchmaking , 2003, SEMWEB.

[11] Butler W. Lampson,et al. Simple Public Key Certificate , 1998 .

[12] Sabrina De Capitani di Vimercati,et al. An algebra for composing access control policies , 2002, TSEC.

[13] Butler W. Lampson,et al. SPKI Certificate Theory , 1999, RFC.

[14] Joachim Biskup,et al. Towards a credential-based implementation of compound access control policies , 2004, SACMAT '04.