유비쿼터스 환경에서 이벤트 서비스 보안을 위한 온톨로지 활용 속성기반 접근통제 기법

다국어 초록 (Multilingual Abstract)

In ubiquitous environment event processing system supports loosely coupled communication between event producers and event consumers and the anonymity of them. And subjects publishing or consuming events can be unknown to event processing system when policies are specified. It is hard to apply traditional access control methods to event processing system because they specify and enforce policies for known subjects. We propose attribute-based access control mechanism using ontology inference to enable event processing system to handle policy to semantic information, for resolving access control problem which event producers and event consumers can not be identified in advance, and enabling machines to process semantic information.

참고문헌 (Reference)

1 OASIS, "XACML 2.0 Specification"

2 Department, "Trusted Computer System Evaluation Criteria"

3 "The Friend of a Friend (FOAF) project"

4 T. Priebe, "Supporting attribute-based access control with ontologies" 2006

5 W3C, "SWRL: A Semantic Web Rule Language Combining OWL and RuleML"

6 R.S. Sandhu, "Role-Based Access Control Models" COMPUTER 38-47, 1996

7 W3C, "Resource Description Framework (RDF): Concepts and Abstract Syntax"

8 W3C, "Resource Description Framework (RDF) Schema Specification"

9 W3C, "Resource Description Framework (RDF) / W3C Semantic Web Activity"

10 W3C, "RDF/XML Syntax Specification"

11 W3C, "RDF Vocabulary Description Language 1.0: RDF Schema"

12 W3C, "RDF Semantics"

13 M.A. Harrison, "Protection in operating systems" 19 : 461-471, 1976

14 D.F. Ferraiolo, "Proposed NIST standard for role-based access control" 4 : 224-274, 2001

15 W3C, "OWL Web Ontology Language Semantics and Abstract Syntax"

16 W3C, "OWL Web Ontology Language Reference"

17 W3C, "OWL Web Ontology Language Overview"

18 W3C, "OWL Web Ontology Language Guide"

19 K.J. Biba, "Integrity Considerations for Secure Computer Systems"

20 E. Yuan, "Attributed based access control (ABAC) for Web services" 2005

21 T. Priebe, "A Pattern System for Access Control" 2004