Abstract
In the last few years XML-based access control languages like XACML have been increasingly used for specifying complex policies regulating access to network resources. Today, growing interest in semantic-Web style metadata for describing resources and users is stimulating research on how to express access control policies based on advanced descriptions rather than on single attributes.
In this paper, we discuss how standard XACML policies can handle ontology-based resource and subject descriptions based on the standard P3P base data schema. We show that XACML conditions can be transparently expanded according to ontology-based models representing semantics. Our expansion technique greatly reduces the need for online reasoning and decreases the system administrator’s effort for producing consistent rules when users’ descriptions comprise multiple credentials with redundant attributes.
Chapter PDF
Similar content being viewed by others
References
Ardagna, C.A., Damiani, E., De Capitani di Vimercati, S., Cremonini, M., Samarati, P.: Towards Identity Management for E-Services. In: Proc. of the TED Conference on e-Government Electronic democracy: The challenge ahead, Bozen, Italy (March 2005)
Bonatti, P.A., Samarati, P.: A Uniform Framework for Regulating Service Access and Information Release on the Web. Journal of Computer Security 10(3), 241–272 (2002)
Damiani, E., De Capitani di Vimercati, S., Fugazza, C., Samarati, P.: Extending Policy Languages to the Semantic Web. In: Koch, N., Fraternali, P., Wirsing, M. (eds.) ICWE 2004. LNCS, vol. 3140, pp. 330–343. Springer, Heidelberg (2004)
eXtensible Access Control Markup Language (XACML) – Organization for the Advancement of Structured Information Standards, http://www.oasisopen.org/committees/tc_home.php?wg_abbrev=xacml
Pan, J.Z., Horrocks, I.: Metamodeling Architecture of Web Ontology Languages. In: Proc. of the Semantic Web Working Symposium (2001)
Ceravolo, P., Damiani, E., De Capitani di Vimercati, S., Fugazza, C., Samarati, P.: Advanced Metadata for Privacy-Aware Representation of Credentials. In: Proc. of the ICDE Workshop on Privacy Data Management (PDM 2005) (2005)
OWL Web Ontology Language – Overview – W3C Recommendation (December 2003), http://www.w3.org/TR/owl-features/
Platform for Privacy Preferences (P3P) – W3C Recommendation, April 16 (2002), http://www.w3.org/TR/P3P/
Privacy and Identity Management for Europe (PRIME) – European RTD Integrated Project, http://www.prime-project.eu.org/
RDF Vocabulary Description Language (RDFS) – W3C Recommendation, February 10 (2004), http://www.w3.org/TR/rdf-schema/
RDQL - A Query Language for RDF - W3C Member Submission, January 9 (2004), http://www.w3.org/Submission/2004/SUBM-RDQL-20040109
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2005 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Ardagna, C., Damiani, E., De Capitani di Vimercati, S., Fugazza, C., Samarati, P. (2005). Offline Expansion of XACML Policies Based on P3P Metadata. In: Lowe, D., Gaedke, M. (eds) Web Engineering. ICWE 2005. Lecture Notes in Computer Science, vol 3579. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11531371_48
Download citation
DOI: https://doi.org/10.1007/11531371_48
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-27996-9
Online ISBN: 978-3-540-31484-4
eBook Packages: Computer ScienceComputer Science (R0)Springer Nature Proceedings Computer Science
Keywords
These keywords were added by machine and not by the authors. This process is experimental and the keywords may be updated as the learning algorithm improves.
