Department of Computer Science
Access control on semantic web data using query rewriting
Semantic Web technologies allow on-line resources to be semantically annotated to support more effective and intelligent online services. However, ontologies sometimes may contain sensitive information. Providing access to them requires proper control to ensure the data protection requirement. Yet, the protection should not be too restrictive to make the access management inflexible. While there has been recent work on policy-based access control, in this paper, the authors present a policy representation specifically for access control on ontology-based data and explain how issues like policy propagation and policy conflict resolution are addressed. The authors present bucket-based query rewriting algorithms for realizing the access control policies to avoid sensitive resources leakage in the context of the Semantic Web. The authors validate the correctness of the proposed mechanisms by going through some illustrative examples in detail.
Source Publication Title
International Journal of Organizational and Collective Intelligence
This work is partially supported by HKBU Faculty Research Grant (FRG/07-08/II-75).
Link to Publisher's Edition
Li, Jian, and William K. Cheung. "Access control on semantic web data using query rewriting." International Journal of Organizational and Collective Intelligence 1.2 (2010): Article 3.