An ontology regulating privacy oriented access controls

Rahmouni Boussi, Hanene

Abstract

Access Control is one of the essential and traditional security
weapons of data protection. In open and complex environments such as the Internet or cloud computing, the decision to grant access to a resource must ensure a secure management with a specific attention to privacy and data protection regulations. In recent years, many access control models and languages were proposed. Despite increasing legislative pressure, few of these propositions take care of privacy requirements in their
specifications. In this paper we propose to enforce privacy compliance in access control policies. Based on a semantic modeling approach, specifically formal ontology, we will try to incorporate data protection legislation requirements in policies specification and implementation. This aims to abstract the complexity of legal requirements expression and to
facilitate their automation and enforcement at execution level. Indeed, at run time, the interoperability of diverse information and the reference to the text law are addressed in a novel manner.

• Acceptance Date: Dec 9, 2015
• Publication Date: Mar 5, 2016
• Deposit Date: Jan 14, 2019
• Journal: Risks and Security of Internet and Systems
• Peer Reviewed: Peer Reviewed
• Book Title: Risks and Security of Internet and Systems
• ISBN: 9783319766867
• Keywords: security, access control policies, privacy policies, legislation, semantic web, ontology
• Public URL: https://uwe-repository.worktribe.com/output/913438
• Publisher URL: http://dx.doi.org/10.1007/978-3-319-76687-4
• Contract Date: Jan 14, 2019